CVE-2024-49387 MEDIUM

CVE-2024-49387

Vendor Acronis

Product Acronis Cyber Protect 16

Weakness CWE-319 · Cleartext transmission

Published October 15, 2024

Last update October 15, 2024

View on NVD All CVEs

CVSS base score

5.4/10

Attack vector Adjacent

Attack complexity High

Privileges required None

User interaction Required

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N

What the vulnerability does

01Description

Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.

Key dates

02Disclosure timeline

October 15, 2024 CVE published

October 15, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-49387 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/319.html

Related vulnerabilities

04Related CVE

CVE-2026-33569 Anviz Products Cleartext Transmission of Sensitive Information CVE-2026-1014 IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information CVE-2026-5119 Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment CVE-2026-7610 TRENDnet TEW-821DAP Firmware Update ssi cleartext transmission CVE-2026-41275 Flowise: Password Reset Link Sent Over Unsecured HTTP

Identifiers

CVE CVE-2024-49387

CWE CWE-319

CVSS 5.4 / MEDIUM

Affected versions

Vendor Acronis

Product Acronis Cyber Protect 16

Affected ≥ unspecified and < 38690