CVE-2024-49385

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-01-02 · updated 2026-06-17
Weakness: CWE-732

Description

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image (Windows) before build 41736, Acronis True Image OEM (Windows) before build 42575.

Affected products

Acronis True Image OEM: before 42575 — fixed in 42575
Acronis True Image: before 41736 — fixed in 41736

How to fix

Upgrade to a fixed version: Acronis True Image OEM 42575; Acronis True Image 41736. Check the vendor advisory for mitigations.

References

https://security-advisory.acronis.com/advisories/SEC-2397

Get alerted when CVE-2024-49385 or the next vulnerability affects your stack