Security Vulnerabilities fixed in Acronis Cyber Protect 15.0.29240

Description

This update contains fixes for 1 high, 2 medium and 3 low severity security vulnerabilities and is recommended for all users. The vulnerabilities include: Cleartext transmission of sensitive information, Sensitive information disclosure due to insecure folder permissions, Open redirect via user-controlled query parameter, HTML injection via report name, and Security update of Elasticsearch dependency.

Affected Applications

Acronis Cyber Protect

CVE References

CVE-2022-30990 CVE-2022-30991 CVE-2022-30992 CVE-2022-30993 CVE-2022-30994

Other References

https://security-advisory.acronis.com/updates/UPD-2202-100d-7e70