MSRXMSRXSecurity
Vulnerabilities / CVE-2024-34015

CVE-2024-34015

Published 2024-11-11 · Deferred

CVE-2024-34015

3.3 LOW
CVSS 3.0 · CNA · acronis.com
0.2%
chance of exploitation in the next 30 days (EPSS; higher than 10% of CVEs)

Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892.

Scores

3.3CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NCNA · acronis.com

Affected products

  • Acronis Acronis Backup plugin for cPanel & WHM: unspecified to < 1.8.3.818
  • Acronis Acronis Backup plugin for cPanel & WHM: unspecified to < 1.9.1.892

Weakness: CWE-61

1 references (advisories, patches, write-ups)

Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVECheck your dependenciesScan a website