MSRXMSRXSecurity
Vulnerabilities / CVE-2024-8767

CVE-2024-8767

Published 2024-09-17 · Deferred

CVE-2024-8767

9.9 CRITICAL
CVSS 3.0 · CNA · acronis.com
0.5%
chance of exploitation in the next 30 days (EPSS; higher than 41% of CVEs)

Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147.

Scores

9.9CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HCNA · acronis.com

Affected products

  • Acronis Acronis Backup plugin for cPanel & WHM: unspecified to < 619
  • Acronis Acronis Backup extension for Plesk: unspecified to < 555
  • Acronis Acronis Backup plugin for DirectAdmin: unspecified to < 147

Weakness: CWE-250

1 references (advisories, patches, write-ups)

Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVECheck your dependenciesScan a website