CVE-2022-44745 - Vulnerability Details - OpenCVE

ReportizFlow

Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Acronis	Cyber Protect Home Office

Configuration 1 [-]

cpe:2.3:a:acronis:cyber_protect_home_office:*:*:*:*:*:windows:*:*

No data.

References

Link	Providers
https://security-advisory.acronis.com/advisories/SEC-3481

History

Thu, 01 May 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Acronis

Published: 2022-11-07T19:00:59.626Z

Updated: 2025-05-01T14:52:47.400Z

Reserved: 2022-11-04T17:26:52.916Z

Link: CVE-2022-44745

Vulnrichment

Updated: 2024-08-03T14:01:31.230Z

NVD

Status : Modified

Published: 2022-11-07T20:15:09.957

Modified: 2026-06-17T05:08:52.543

Link: CVE-2022-44745

Redhat

No data.

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "Acronis Cyber Protect Home Office", "vendor": "Acronis", "versions": [{"lessThan": "40107", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "[email protected]"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:acronis:cyber_protect_home_office:*:*:*:*:*:windows:*:*", "matchCriteriaId": "0758DECA-6EB3-4455-9473-6E8005787FFB", "versionEndExcluding": "40107", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107."}, {"lang": "es", "value": "Se filtra informaci\u00f3n sensible a trav\u00e9s de archivos de registro. Los siguientes productos se ven afectados: Acronis Cyber Protect Home Office (Windows) anterior a la compilaci\u00f3n 40107."}], "id": "CVE-2022-44745", "lastModified": "2026-06-17T05:08:52.543", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 0.3, "impactScore": 3.6, "source": "[email protected]", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2022-44745", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-05-01T14:52:32.278477Z", "version": "2.0.3"}}]}, "published": "2022-11-07T20:15:09.957", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://security-advisory.acronis.com/advisories/SEC-3481"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://security-advisory.acronis.com/advisories/SEC-3481"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-532"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-532"}], "source": "[email protected]", "type": "Primary"}]}