Vulnerabilities

TI-2024-32973 CVE-2024-49388 · GHSA-7729-x926-xq76

Authorization bypass in Acronis Cyber Protect 16

LOW 39

Sensitive information manipulation due to improper authorization.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00266 Published 2024-10-15 Fixed in 38690 CWE-639

TI-2024-32972 CVE-2024-49387 · GHSA-qjcx-2536-hmpj

LOW 32

Cleartext transmission of sensitive information in acep-collector service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00171 Published 2024-10-15 Fixed in 38690 CWE-319

TI-2024-32969 CVE-2024-49384 · GHSA-3q35-qxf2-xprf

LOW 19

Excessive attack surface in acep-collector service due to binding to an unrestricted IP address.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00216 Published 2024-10-15 Fixed in 38690 CWE-1327

TI-2024-32968 CVE-2024-49383 · GHSA-73qp-wrvv-85m7

LOW 19

Excessive attack surface in acep-importer service due to binding to an unrestricted IP address.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00216 Published 2024-10-15 Fixed in 38690 CWE-1327

TI-2024-32967 CVE-2024-49382 · GHSA-g3wf-c9jp-7296

LOW 19

Excessive attack surface in archive-server service due to binding to an unrestricted IP address.

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00216 Published 2024-10-15 Fixed in 38690 CWE-1327