CVE-2023-2355
https://notcve.org/view.php?id=CVE-2023-2355
Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 3900. • https://security-advisory.acronis.com/advisories/SEC-4048 • CWE-427: Uncontrolled Search Path Element •
CVE-2022-30697 – Local privilege escalation due to insecure folder permissions
https://notcve.org/view.php?id=CVE-2022-30697
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 3640 Una escalada de privilegios local debido a permisos de carpetas no seguras. Los siguientes productos están afectados: Acronis Snap Deploy (Windows) versiones anteriores a la compilación 3640 • https://security-advisory.acronis.com/advisories/SEC-3082 • CWE-427: Uncontrolled Search Path Element •
CVE-2022-30696 – Local privilege escalation due to a DLL hijacking vulnerability
https://notcve.org/view.php?id=CVE-2022-30696
Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 3640 Una escalada de privilegios local debido a una vulnerabilidad de secuestro de DLL. Los siguientes productos están afectados: Acronis Snap Deploy (Windows) versiones anteriores a la compilación 3640 • https://security-advisory.acronis.com/advisories/SEC-3081 • CWE-427: Uncontrolled Search Path Element •
CVE-2022-30695 – Local privilege escalation due to excessive permissions assigned to child processes
https://notcve.org/view.php?id=CVE-2022-30695
Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Snap Deploy (Windows) before build 3640 Una escalada de privilegios local debido a permisos excesivos asignados a los procesos hijos. Los siguientes productos están afectados: Acronis Snap Deploy (Windows) versiones anteriores a la compilación 3640 • https://security-advisory.acronis.com/advisories/SEC-3080 • CWE-250: Execution with Unnecessary Privileges CWE-269: Improper Privilege Management •