Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cyber_protect | Acronis | * | 15 (including) |
| Cyber_protect | Acronis | 16 (including) | 16 (including) |
| Cyber_protect | Acronis | 16-update1 (including) | 16-update1 (including) |