MSRXMSRXSecurity
Vulnerabilities / CVE-2024-34014

CVE-2024-34014

Published 2024-11-11 · Deferred

CVE-2024-34014

5.5 MEDIUM
CVSS 3.0 · CNA · acronis.com
0.2%
chance of exploitation in the next 30 days (EPSS; higher than 9% of CVEs)

Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.

Scores

5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NCNA · acronis.com

Affected products

  • Acronis Acronis Backup plugin for cPanel & WHM: unspecified to < 1.8.3.818
  • Acronis Acronis Backup plugin for cPanel & WHM: unspecified to < 1.9.1.892
  • Acronis Acronis Backup extension for Plesk: unspecified to < 1.8.6.599
  • Acronis Acronis Backup plugin for DirectAdmin: unspecified to < 1.2.2.181

Weakness: CWE-61

1 references (advisories, patches, write-ups)

Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVECheck your dependenciesScan a website