VU#489392: Acronis True Image fails to update itself securely

Vulnerability Note VU#489392 Acronis True Image fails to update itself securely Original Release date: 19 Jun 2017 | Last revised: 28 Jun 2017 Overview Acronis True Image fails to securely check for and retrieve updates, which an allow an authenticated attacker to execute arbitrary code with administrator privileges. Description Acronis True Image is a disk backup utility for Windows and Mac systems. Acronis True Image versions through and including 2017 Build 8053 performs update operations over unprotected HTTP channels. Downloaded…