CVE-2020-10139 — HIGH (7.8)

Vulnerability Description

Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\. Acronis True Image contains a privileged service that uses this OpenSSL component. Because unprivileged Windows users can create subdirectories off of the system root, a user can create the appropriate path to a specially-crafted openssl.cnf file to achieve arbitrary code execution with SYSTEM privileges.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Acronis	True Image	2021

Related Weaknesses (CWE)

CWE-665 CWE-284

References

https://www.kb.cert.org/vuls/id/114757Third Party AdvisoryUS Government Resource
https://www.kb.cert.org/vuls/id/114757Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2020-10139?

CVE-2020-10139 is a vulnerability with a CVSS score of 7.8 (HIGH). Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\. Acronis True Image contains a privileged service that uses this ...

How severe is CVE-2020-10139?

CVE-2020-10139 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-10139?

Check the references section above for vendor advisories and patch information. Affected products include: Acronis True Image.