CVE-2023-44160
Assigner: Acronis
Published: 2023-09-27T12:01:23.677Z
State: PUBLISHED
problemTypes: descriptions: cweId: CWE-352
description: CWE-352
type: CWE
affected: vendor: Acronis
product: Acronis Cyber Protect 15
platforms: Linux
Windows
versions: version: unspecified
status: affected
lessThan: 35979
versionType: semver
defaultStatus: unaffected
descriptions: value: Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
credits: value: @laz0rde (https://hackerone.com/laz0rde)
type: finder
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_0: version: 3.0
baseScore: 3.1
baseSeverity: MEDIUM
vectorString: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N