CVE-2024-56413

MEDIUM

Acronis Cyber Protect <16 - Info Disclosure

Title source: llm
STIX 2.1

Description

Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.

References (1)

Core 1
Core References

Scores

CVSS v3 6.1
EPSS 0.0023
EPSS Percentile 13.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-613
Status published
Products (1)
Acronis/Acronis Cyber Protect 16 unspecified - 39169
Published Jan 02, 2025
Tracked Since Feb 18, 2026