Security Vulnerabilities fixed in Acronis Cyber Protect Agent 15.0.26172

Description

An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the local notification service misconfigures CORS, information disclosure can occur and there is also cross-site scripting (XSS) in the console.

Affected Applications

Acronis Cyber Protect Agent

CVE References

CVE-2020-35556 CVE-2020-35664

Other References

https://dl.managed-protection.com/u/cyberprotect/rn/15/user/en-US/AcronisCyberProtect15_relnotes.htm