TrueImage for Acronis True Image 2020 - Untrusted DLL Search-Ordering lead to Privilege Escalation as Administrative account
该报告还没有中文解读。
原文摘录
摘自原文（3108 字符中的一小部分）
Vulnerability Explanation : An issue was discovered in Acronis Service Manager Service which intregated from Acronis Cyber Backup ver.15.0.24197. This service is suffered by untrusted search binary. The malicious users who are in “Authenticated Users” group can use malicious DLL file to execute …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Acronis 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @vanitas · 版权归作者与 Acronis 所有