← Back

CVE-2024-56413

nvd nist
Published: Jan 2, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
6.1
Vector
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Exploitability: 0.9 / Impact: 5.2
Source: security@acronis.com (Secondary)

Description

Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.

Related CWEs

CWE-613
Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (1)

Source: security@acronis.com

Timeline

No history available yet.