CVE-2002-1538: Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of ot...

Security readout for executives and security teams

This flaw lets an authenticated Acuma Acusend user view another user's reports if they can guess the report URL. The reported issue affects Acusend 4 and possibly earlier versions. The business risk is unauthorized disclosure of report contents, especially if reports contain sensitive customer, operational, or security data. Exposure is likely limited to organizations still running Acuma Acusend 4 or possibly earlier versions. Risk is higher where the reporting interface is reachable by broad user populations or from untrusted networks. Given the age of the CVE, exposure is most plausible in legacy internal systems. Treat this as a legacy data exposure risk. Prioritize review if Acusend stores sensitive reports or is accessible beyond a small trusted user group. It is not KEV-listed in the provided bundle, but unsupported legacy reporting systems can create quiet disclosure risk. Mitigation focus: Inventory Acuma Acusend deployments and confirm whether version 4 or earlier is present.; Check vendor or maintainer guidance for patches, supported replacements, or configuration hardening.; Restrict Acusend access to trusted networks and approved user groups..

Prepared

Jun 30, 2026, 03:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.