CVE Catalog

CVE-2023-41747

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.36%

28th percentile - higher than 28% of all known CVEs

Summary

CVE-2023-41747 involves sensitive information disclosure due to unauthenticated path traversal. The affected products are Acronis Cloud Manager (Windows) before build 6.2.23089.203.

Risk Assessment

Organizations may be exposed to the disclosure of confidential data, potentially leading to privacy and security breaches.

Recommendation

It is recommended to update Acronis Cloud Manager to version 6.2.23089.203 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Sensitive information disclosure due to unauthenticated path traversal. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS