Skip to main content

Cyber Protect CVE-2025-30413

MEDIUM
Incorrect Permission Assignment for Critical Resource (CWE-732)
2026-03-06 security@acronis.com
Information Disclosure Cyber Protect Agent Windows macOS
4.4
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.4 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 22:06 vuln.today
CVE Published
Mar 06, 2026 - 00:16 nvd
MEDIUM 4.4

DescriptionCVE.org

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.

AnalysisAI

Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186. [CVSS 4.4 MEDIUM]

Technical ContextAI

This vulnerability (CWE-732: Incorrect Permission Assignment for Critical Resource) Credentials are not deleted from Acronis Agent after plan revocation. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40497, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build 41186.

RemediationAI

Monitor vendor advisories for a patch.

More in Cyber Protect

View all
CVE-2025-30412 CRITICAL
10.0 Feb 20

Second improper authentication in Acronis Cyber Protect 16. CVSS 10.0.
CVE-2025-30411 CRITICAL
10.0 Feb 20

Improper authentication in Acronis Cyber Protect 16. CVSS 10.0.
CVE-2025-30416 CRITICAL
10.0 Feb 20

Missing authorization in Acronis Cyber Protect 16 allows sensitive data access. CVSS 10.0.
CVE-2026-28710 CRITICAL
9.8 Mar 06

Improper authentication in Acronis Cyber Protect 17.
CVE-2024-49388 CRITICAL
9.1 Oct 15

Sensitive information manipulation due to improper authorization. Rated critical severity (CVSS 9.1), this vulnerability
CVE-2023-44206 CRITICAL
9.1 Sep 27

Sensitive information disclosure and manipulation due to improper authorization. Rated critical severity (CVSS 9.1), thi
CVE-2023-44152 CRITICAL
9.1 Sep 27

Sensitive information disclosure and manipulation due to improper authentication. Rated critical severity (CVSS 9.1), th
CVE-2023-44154 HIGH
8.1 Sep 27

Sensitive information disclosure and manipulation due to improper authorization. Rated high severity (CVSS 8.1), this vu
CVE-2023-41743 HIGH
7.8 Aug 31

Local privilege escalation due to insecure driver communication port permissions. Rated high severity (CVSS 7.8), this v
CVE-2023-44157 HIGH
7.8 Sep 27

Local privilege escalation due to insecure folder permissions. Rated high severity (CVSS 7.8), this vulnerability is low
CVE-2023-41744 HIGH
7.8 Aug 31

Local privilege escalation due to unrestricted loading of unsigned libraries. Rated high severity (CVSS 7.8), this vulne
CVE-2021-44198 HIGH
7.8 Nov 29

DLL hijacking could lead to local privilege escalation. Rated high severity (CVSS 7.8), this vulnerability is no authent

Same weakness CWE-732 – Incorrect Permission Assignment for Critical Resource

View all
CVE-2017-9462 HIGH POC
8.8
CVE-2017-3006 HIGH POC
8.8
CVE-2017-9602 CRITICAL POC
9.8
CVE-2022-22960 HIGH POC
7.8
CVE-2021-38085 HIGH POC
7.8
CVE-2021-35449 HIGH POC
7.8
CVE-2020-11855 HIGH POC
7.8
CVE-2020-10883 HIGH POC
7.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2025-30413 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy