CVE-2024-8767
Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147.
- Score
- CVSS 3.0 9.9 Critical
- Status
- Deferred - security@acronis.com
- Published
- 2024-09-17
- Last modified
- 2024-09-17
- Weaknesses
- CWE-250
Affected products
- Acronis Backup Extension For Plesk (Acronis)
- Acronis Backup Plugin For Cpanel Whm (Acronis)
- Acronis Backup Plugin For Directadmin (Acronis)
- Backup Extension For Plesk (Acronis)
- Backup Plugin For Cpanel & Whm (Acronis)
- Backup Plugin For Directadmin (Acronis)
References
- https://security-advisory.acronis.com/advisories/SEC-4976
