CVE-2023-41744 | THREATINT

Description

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.

Reserved 2023-08-31 | Published 2023-08-31 | Updated 2024-10-01 | Assigner Acronis

HIGH: 7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-347

Product status

Default status

unaffected

Any version before 30600

affected

Default status

unaffected

Any version before 35979

affected

Credits

@vkas-afk (https://hackerone.com/vkas-afk) finder

References

security-advisory.acronis.com/advisories/SEC-4728 (SEC-4728) vendor-advisory

cve.org (CVE-2023-41744)

nvd.nist.gov (CVE-2023-41744)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.