CVE-2023-41748
Assigner: Acronis
Published: 2023-08-31T17:54:25.532Z
State: PUBLISHED
problemTypes: descriptions: cweId: CWE-20
description: CWE-20
type: CWE
affected: vendor: Acronis
product: Acronis Cloud Manager
platforms: Windows
versions: version: unspecified
status: affected
lessThan: 6.2.23089.203
versionType: semver
defaultStatus: unaffected
descriptions: value: Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.
credits: value: @putsi (https://hackerone.com/putsi)
type: finder
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_0: version: 3.0
baseScore: 8
baseSeverity: HIGH
vectorString: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H