CVE-2024-56413

Published Jan 2, 2025

Last updated 2 months ago

CVSS medium 6.1

Overview

Description
Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.
Source
security@acronis.com
NVD status
Received

Risk scores

CVSS 3.0

Type
Secondary
Base score
6.1
Impact score
5.2
Exploitability score
0.9
Vector string
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Severity
MEDIUM

Weaknesses

security@acronis.com
CWE-613

Social media

Hype score
Not currently trending

  1. CVE-2024-56413 Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. https://t.co/pKMvPBg7HL

    @CVEnew

    3 Jan 2025

    408 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2024-56413 Session Invalidation Flaw in Acronis Cyber Protect 16 If a user is deleted, the session does not end. This affects Acronis Cyber Protect 16 (Windows) before build 39169. https://t.co/le73sfXPaE

    @VulmonFeeds

    2 Jan 2025

    67 Impressions

    1 Retweet

    2 Likes

    1 Bookmark

    0 Replies

    0 Quotes

References