CVE-2022-44732 - Local privilege escalation due to insecure folder permissions

Back Back to CVE browser

HIGH

Local privilege escalation due to insecure folder permissions

Published Nov 7, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.16%

Description

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39900.

Affected products

Vendor Acronis Product Acronis Cyber Protect Home Office Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <39900

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Acronis

Acronis Cyber Protect Home Office

unaffected

Version	Status	Constraints
0	affected	<39900

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-269

Improper Privilege Management

CWE-732

Incorrect Permission Assignment

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-47664
Advisory
https://security-advisory.acronis.com/advisories/SEC-3040
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-47664		Advisory
https://security-advisory.acronis.com/advisories/SEC-3040		vendor-advisoryVendor Advisory