CVE-2024-8767 — Acronis / Acronis Backup plugin for cPanel & WHM

CVE-2024-8767

Acronis / Acronis Backup plugin for cPanel & WHM PUBLISHED

Description (CNA)

Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147.

Affected (CNA)

Vendor / product	Versions
Acronis / Acronis Backup plugin for cPanel & WHM	affected unspecified before 619
Acronis / Acronis Backup extension for Plesk	affected unspecified before 555
Acronis / Acronis Backup plugin for DirectAdmin	affected unspecified before 147

CWE

CWE-250

References

https://security-advisory.acronis.com/advisories/SEC-4976

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.