CVE-2024-8767

Description

Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147.

References

https://securityonline.info/acronis-backup-plugins-hit-by-cve-2024-8767-cvss-9-9-severity-alert/?&web_view=true

https://security-advisory.acronis.com/advisories/SEC-4976

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3