Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713, Acronis True Image OEM (Win...

CVE-2023-5042 · published 3 years ago
Summary

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713, Acronis True Image OEM (Windows) before build 42575.

What to do
  • Update acronis cyber_protect_home_office to version 40713 or later.
Affected software
VendorProductAffected versions
acronis cyber_protect_home_office < 40713
cpe:2.3:a:acronis:cyber_protect_home_office:*:*:*:*:*:*:*:*
Original advisory text
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713, Acronis True Image OEM (Win...
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40713, Acronis True Image OEM (Windows) before build 42575.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-276Incorrect Default Permissions
Timeline
Published20 Sep 2023
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2023-5042 · NVD
Track software like this
Free during beta