CVE-2024-34014 — Acronis / Acronis Backup plugin for cPanel & WHM

Description (CNA)

Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.

Affected (CNA)

Vendor / product	Versions
Acronis / Acronis Backup plugin for cPanel & WHM	affected unspecified before 1.8.3.818
Acronis / Acronis Backup plugin for cPanel & WHM	affected unspecified before 1.9.1.892
Acronis / Acronis Backup extension for Plesk	affected unspecified before 1.8.6.599
Acronis / Acronis Backup plugin for DirectAdmin	affected unspecified before 1.2.2.181

CWE

CWE-61

References

https://security-advisory.acronis.com/advisories/SEC-7592

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.