CVE-2022-45459 LOW

CVE-2022-45459

Vendor Acronis
Product Acronis Agent
Weakness CWE-200 · Info exposure
Published May 18, 2023
Last update January 22, 2025
View on NVD All CVEs

CVSS base score

3.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.

Key dates

02Disclosure timeline

May 18, 2023 CVE published
January 22, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-11291 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure CVE-2025-11406 kaifangqian kaifangqian-base SysUserController.java getAllUsers information disclosure CVE-2024-38747 WordPress HitPay Payment Gateway for WooCommerce plugin <= 4.1.3 - Sensitive Data Exposure via Log File vulnerability CVE-2022-40194 WordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Sensitive Information Disclosure vulnerability CVE-2025-62158 Frappe had attachments made by students to their assignments of type Text set to public