Back to overview

CVE-2024-8767

CRITICAL
9.9
CVSS 3.0
Description
Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147.

Metadata

CVE ID
CVE-2024-8767
State
PUBLISHED
Assigner
Acronis
Reserved
2024-09-12 20:55 UTC
Published
2024-09-17 08:51 UTC
Last updated
2024-09-17 13:43 UTC
Primary CWE
CWE-250
CWE-250
Vendor / Product
Acronis / Acronis Backup plugin for cPanel & WHM
Sources
cve.org  ·  NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
no
Tech. Impact
total
Affected products (3)
VendorProductPlatformVersions
Acronis Acronis Backup extension for Plesk Linux unspecified < 555
Acronis Acronis Backup plugin for cPanel & WHM Linux unspecified < 619
Acronis Acronis Backup plugin for DirectAdmin Linux unspecified < 147
Weakness (CWE)
CWESourceDescription
CWE-250 cna CWE-250
CVSS scores (1)
ScoreSeverityVersionSourceVector
9.9 CRITICAL 3.0 cna CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References (1)
Back to overview