CVE-2023-48680 LOW

CVE-2023-48680

Vendor Acronis
Product Acronis Cyber Protect 16
Weakness CWE-359
Published February 27, 2024
Last update September 10, 2024
View on NVD All CVEs

CVSS base score

3.3/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect 16 (macOS, Windows) before build 37391.

Key dates

02Disclosure timeline

February 27, 2024 CVE published
September 10, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-13215 Elementor Addon Elements <= 1.13.10 - Authenticated (Contributor+) Sensitive Information Exposure via Modal Popup CVE-2023-25819 Discourse tags with no visibility are leaking into og:article:tag CVE-2024-38103 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability CVE-2023-29203 Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm CVE-2026-57960 Hi.Events 1.9.0 - Unauthenticated Attendee PII Exposure via Check-in List short_id