CVE-2024-34014
Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.
- Score
- CVSS 3.0 5.5 Medium
- Status
- Deferred - security@acronis.com
- Published
- 2024-11-11
- Last modified
- 2025-02-27
- Weaknesses
- CWE-61
Affected products
- Acronis Backup Extension For Plesk (Acronis)
- Acronis Backup Plugin For Cpanel Whm (Acronis)
- Acronis Backup Plugin For Directadmin (Acronis)
References
- https://security-advisory.acronis.com/advisories/SEC-7592
