Acronis Cyber Protect 17 stores credentials in an insufficiently protected manner, allowing disclosure of sensitive authentication data. The vulnerability can expose usernames, passwords, or other authentication tokens that could be used for further access or credential reuse. This weakness is categorized as CWE-522, indicating that critical data at rest is inadequately secured. The impact level is moderate, as the disclosed information could be leveraged for broader compromise but does not directly grant privileges on its own.

Acronis Cyber Protect 17 for Linux and Windows, versions built before 42587 are affected. Only these deployments are vulnerable; newer builds release after 42587 are not impacted by this issue.

The CVSS score of 5.3 suggests a medium severity vulnerability. EPSS data is not available, so the current exploitation probability cannot be quantified from the available metrics. The vulnerability is not listed in CISA’s KEV catalog, indicating no confirmed widespread exploitation. Based on the description, the likely attack vector is local or requires pre‑existing access to the protected credential files; an attacker who can read the local filesystem could exploit the vulnerability, but no remote exploitation path is explicitly documented. Without additional information, the risk is considered moderate due to the potential for credential compromise but limited direct impact on system control.