Local Privilege Escalation when updating Acronis True Image
该报告还没有中文解读。
原文摘录
摘自原文(2287 字符中的一小部分)
Summary Acronis True Image has a feature that updates itself with its newer version automatically or manually depending on the user choice. When updating, the software writes log file named with **SYSYEM** privileges accessible to normal user . This can be escalated to privileged write …
原文中的代码
## Steps To Reproduce
I'm using **Acronis True Image Version 2021, Build 32010** and will update it to latest build for demonstration.
{F1151730}
In this example, I will overwrite 默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Acronis 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @z3ron3 · 版权归作者与 Acronis 所有