CVE-2022-30995

CRITICAL Year: 2022
CVSS v3 Score
9.3
Critical
Weakness Type
CWE-287
View all →

Vulnerability Description

Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545.

Related Vulnerabilities

CVE-2019-14909

CRITICAL
CVSS:9.3(Critical)

A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be accepted.

CWE-2872019

CVE-2019-14910

CRITICAL
CVSS:9.3(Critical)

A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case user authentication ...

CWE-2872019

CVE-2024-36266

HIGH
CVSS:9.3(Critical)

A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protects responses to authentication requests. This could allow a local attacker to bypa...

CWE-2872024

CVE-2017-14000

CRITICAL
CVSS:9.4(Critical)

An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. By accessing a specific uniform resource locator (URL) on the web server, a mali...

CWE-2872017

CVE-2017-9630

CRITICAL
CVSS:9.4(Critical)

An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, LaserWash 360 and 360 Plus, all versions, LaserWash AutoXpre...

CWE-2872017

CVE-2018-14786

CRITICAL
CVSS:9.4(Critical)

Becton, Dickinson and Company (BD) Alaris Plus medical syringe pumps (models Alaris GS, Alaris GH, Alaris CC, and Alaris TIVA) versions 2.3.6 and prior are affected by an improper authentication vulne...

CWE-2872018