CVE-2024-55538

Published: Jan 2, 2025Modified: Jun 17, 2026Deferred

4.0

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.5 / Impact: 1.4

Source: security@acronis.com (Secondary)

Description

Sensitive information disclosure due to missing authentication. The following products are affected: Acronis True Image (macOS) before build 41725, Acronis True Image (Windows) before build 41736, Acronis True Image OEM (macOS) before build 42571, Acronis True Image OEM (Windows) before build 42575.

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (1)

https://security-advisory.acronis.com/advisories/SEC-2209

Source: security@acronis.com

Timeline

No history available yet.