CVE Vulnerabilities

CVE-2021-32581

Improper Certificate Validation

Published: Aug 05, 2021 | Modified: Aug 12, 2021
CVSS 3.x
8.1
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent prior to build 26653, Acronis Cyber Protect prior to build 27009 did not implement SSL certificate validation.

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

Name Vendor Start Version End Version
Cyber_protect_cloud Acronis * 15.0.27009 (excluding)
Cyber_protection_agent Acronis * 15.0.26653 (excluding)
True_image Acronis 2021 (including) 2021 (including)
True_image Acronis 2021-update_1 (including) 2021-update_1 (including)
True_image Acronis 2021-update_2 (including) 2021-update_2 (including)
True_image Acronis 2021-update_3 (including) 2021-update_3 (including)
True_image Acronis 2021-update_4 (including) 2021-update_4 (including)

Potential Mitigations

References