Vulnerability in Acronis True Image Echo Server

CVE-2008-3671

Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.016 (72.6th percentile) — read the EPSS interpretation.

Affected products

Acronis True_image_echo_server — versions 9.5.8072
Linux Linux_kernel
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)