Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-34014

Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Acronis

Description

Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Acronis Acronis Backup plugin for cPanel & WHM

Default version status: unaffected

  • unspecified to < 1.8.3.818affected

Acronis Acronis Backup plugin for cPanel & WHM

Default version status: unaffected

  • unspecified to < 1.9.1.892affected

Acronis Acronis Backup extension for Plesk

Default version status: unaffected

  • unspecified to < 1.8.6.599affected

Acronis Acronis Backup plugin for DirectAdmin

Default version status: unaffected

  • unspecified to < 1.2.2.181affected

References