VulnerabilityModified

CVE-2008-3671

Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows remote attackers to obtain sensitive information.

MEDIUM 5.0EPSS 1.56%

Does this matter?

Lower severity and a low EPSS score (1.56%). Track it; it rarely justifies an emergency change on its own.

Description

Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 1.56% probability · 74th percentile
CISA KEV: Not listed
Weakness: CWE-310
Affected: acronis/true image echo server
Source: cve@mitre.org

References

http://secunia.com/advisories/30856Vendor Advisory
http://www.securityfocus.com/bid/30456
http://secunia.com/advisories/30856Vendor Advisory
http://www.securityfocus.com/bid/30456

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.