CVE-2024-56413CWE-613

Missing session invalidation after user deletion

Medium · published January 2, 2025

CVSS v3.0
6.1
EPSS
0%
Percentile
13.4
In the wild
Unconfirmed
What it is

Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169.

The record
Technical detail
CVSS v3.0
6.1 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00233 · 13.4th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2025-01-02T15:26Z
EPSS history
Timeline
  • 02 JAN 15:26Z
    Missing session invalidation after user deletion
    cvelistv5