CVE-2022-44747
07.11.2022, 20:15
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107.
| Vendor | Product | Version |
|---|---|---|
| acronis | cyber_protect_home_office | 𝑥 < 40107 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-610 - Externally Controlled Reference to a Resource in Another SphereThe product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.