CVE-2022-45455

CVSS V2 None CVSS V3 None
Description
Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
Overview
  • CVE ID
  • CVE-2022-45455
  • Assigner
  • security@acronis.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-02-13T10:15:14
  • Last Modified Date
  • 2023-02-23T05:10:21
Weakness Enumerations
CWE URL
CWE-459 http://cwe.mitre.org/data/definitions/459.html
CWE-459 http://cwe.mitre.org/data/definitions/459.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:* 1 OR c22.07
cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:* 1 OR
cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:* 1 OR
cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:* 1 OR
cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:*:*:* 1 OR
cpe:2.3:a:acronis:cyber_protect:15:update4:*:*:*:*:*:* 1 OR
cpe:2.3:a:acronis:cyber_protect_home_office:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://security-advisory.acronis.com/advisories/SEC-4459 Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-45455
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45455
History
Created Old Value New Value Data Type Notes
2023-04-17 07:36:41 Added to TrackCVE
2023-04-17 07:36:43 Weakness Enumeration new
2023-04-17 08:18:00 CVSS V3 information new