Acronis backup software contains multiple privilege escalation vulnerabilities

guest · Oct 13, 2020

Acronis backup software contains multiple privilege escalation vulnerabilities
Vulnerability Note VU#114757
October 12, 2020
https://kb.cert.org/vuls/id/114757

Overview
Acronis True Image, Cyber Backup, and Cyber Protection all contain privilege escalation vulnerabilities, which can allow an unprivileged Windows user to be able to run arbitrary code with SYSTEM privileges.
Impact
By placing a specially-crafted openssl.cnf or DLL file in a specific location, an unprivileged user may be able to execute arbitrary code with SYSTEM privileges on a Windows system with the vulnerable Acronis software installed. See DLL Search Order Hijacking for more details.
Solution
Apply an update
These vulnerabilities are addressed in Acronis True Image 2021 build 32010 (release notes), Acronis Cyber Backup 12.5 build 16363 (release notes), and Acronis Cyber Protect 15 build 24600 (release notes).
Click to expand...

guest · Oct 13, 2020

Acronis Patches Privilege Escalation Flaws in Backup, Security Solutions
October 13, 2020
https://www.securityweek.com/acronis-patches-privilege-escalation-flaws-backup-security-solutions

The flaws could allow unprivileged Windows users to run code with SYSTEM privileges, a vulnerability note from the CERT Coordination Center (CERT/CC) reveals.

Tracked as CVE-2020-10138 (CVSS score 8.1), the first of the bugs affects Acronis Cyber Backup 12.5 and Cyber Protect 15 and resides in a privileged service that uses “an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\.”

The second flaw, CVE-2020-10139 (CVSS score 8.1), was found in Acronis True Image 2021 and is similar to CVE-2020-10138: an unprivileged user can abuse the privileged service to execute a specially-crafted openssl.cnf file with SYSTEM privileges.
Identified in Acronis True Image 2021 and tracked as CVE-2020-10140 (CVSS score 8.7), the third vulnerability exists because the backup software fails to properly set access control lists (ACLs) for the C:\ProgramData\Acronis directory.
Click to expand...

Log in or Sign up

Acronis backup software contains multiple privilege escalation vulnerabilities

guest Guest

guest Guest

Log in or Sign up

Acronis backup software contains multiple privilege escalation vulnerabilities

guest Guest

guest Guest

Useful Searches