CVE-2024-8767

CVSS 9.9 CRITICALEPSS 0.5%CWE-250

Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147.

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Produtos afetados

Acronis · Acronis Backup extension for Plesk Acronis · Acronis Backup plugin for cPanel & WHM Acronis · Acronis Backup plugin for DirectAdmin

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://security-advisory.acronis.com/advisories/SEC-4976