Skip to main content

Detected vulnerabilities...

Thread needs solution

I have all protection turned off, but I am informed that there are 697 vulnerabilities detected.

It seems that there can be hundreds of "vulnerabilities" all for a single installed item. All my vulnerabilities reduce to three specific items... Flash Player, Java Runtime and Windows 10.

It would be far more useful if there was a more informative message, such as
Java Runtime Environment version 7.0.90 has a gazillion vulnerabilities
rather than listing it each vulnerability separately. As it is, I'm now inclined to simply ignore the whole business.

0 Users found this helpful

Sorry but this is more evidence that some of these new features are being beta tested on users rather than being fit for purpose!

I have all Protection turned off permanently and the associated services disabled to bring ATI back to being what I originally purchased it as, a Backup & Recovery application!

After initial run of the vulnerabilities scan I turned this feature off. Its of no real value. The scan identified 79 vulnerabilities all with Irfanview.

Steve Smith wrote:

I have all Protection turned off permanently and the associated services disabled to bring ATI back to being what I originally purchased it as, a Backup & Recovery application!

+1 How did you disable the Active Protection services permanently (after Update to 34340 it's active again and consumes high CPU)?

Armin, I can send you a PM with the details of how I have done this.  I doubt that Acronis would be happy for me to post such info in the public forums.  As with any changes made to ATI, a new build / upgrade to ATI will reverse all changes - this happened to me too with #34340!

frestogaslorastaswastavewroviwroclolacorashibushurutraciwrubrishabenichikucrijorejenufrilomuwrigaslowrikejawrachosleratiswurelaseriprouobrunoviswosuthitribrepakotritopislivadrauibretisetewrapenuwrapi
Posts: 250
Comments: 7092

Dear Bruno,

thank you for highlighting this usability issue, passed to the product team for review!

frestogaslorastaswastavewroviwroclolacorashibushurutraciwrubrishabenichikucrijorejenufrilomuwrigaslowrikejawrachosleratiswurelaseriprouobrunoviswosuthitribrepakotritopislivadrauibretisetewrapenuwrapi
Posts: 250
Comments: 7092

Here is the respective change request TI-219143 Group vulnerabilities detected based on the affected component, thank you!

Ekaterina, please check what is meant by Group vulnerabilities in this change request? 

The key issue here is that the new feature is listing every known vulnerability for an affected application instead of indicating that there are multiple such issues in the current installed version.

It should be sufficient to provide a link to the vendor website for a later, non vulnerable version or else to a further document listing all the vulnerabilities in detail if thought appropriate to do so.

It could be shown even more simply by showing 'At risk' for individual applications with known vulnerabilities.