PT-2025-3127 · Acronis · Acronis True Image

Published 2024-12-16 · Updated 2025-01-02 · CVE-2024-55538

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Acronis True Image (macOS) versions before build 41725 Acronis True Image (Windows) versions before build 41736

Description The issue is related to sensitive information disclosure due to missing authentication. This affects the ability to protect sensitive data, potentially exposing it.

Recommendations For Acronis True Image (macOS) versions before build 41725, update to build 41725 or later. For Acronis True Image (Windows) versions before build 41736, update to build 41736 or later.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2025-02184

CVE-2024-55538

Affected Products

Acronis True Image

References · 6

• https://security-advisory.acronis.com/advisories/SEC-2209 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02184 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-55538 · Security Note
• https://twitter.com/CVEnew/status/1874830603461468175 · Twitter Post
• https://t.me/cvedetector/14160 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1874957201162313772 · Twitter Post