PT-2025-2831 · Acronis · Acronis True Image

Published 2025-01-02 · Updated 2025-01-03 · CVE-2024-49385

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Acronis True Image (Windows) before build 41736

Description Sensitive information disclosure is possible due to insecure folder permissions. This issue affects Acronis True Image on Windows.

Recommendations For Acronis True Image (Windows) before build 41736, update to a version after build 41736 to resolve the issue. As a temporary workaround, consider restricting access to sensitive folders to minimize the risk of exploitation.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2024-49385

Affected Products

Acronis True Image

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-49385 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-2397 · Vendor Advisory
• https://t.me/cvedetector/14159 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1874954641269498352 · Twitter Post
• https://twitter.com/CVEnew/status/1874830602199085109 · Twitter Post
• https://twitter.com/bluepinksec/status/1874991536192045205 · Twitter Post