CVE-2024-34018: Medium severity acronis snap deploy vulnerability
Published Aug 29, 2024
·Updated
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
Affected Software
5 affected components
Acronis Snap Deploy Windows<6
Acronis Snap Deploy Windows=6
Acronis Snap Deploy Windows=6-update1
Acronis Snap Deploy Windows=6-update1.1
Acronis Snap Deploy Windows=6-update1.2
Event History
Aug 29, 2024
CVE Published
via MITRE·07:15 PM
Data Sourced
via MITRE·07:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-34018?
CVE-2024-34018 is classified as a medium severity vulnerability due to insecure folder permissions that can lead to sensitive information disclosure.
2
How do I fix CVE-2024-34018?
To fix CVE-2024-34018, ensure that folder permissions are properly configured and updated in Acronis Snap Deploy to at least build 4569.
3
Which versions of Acronis Snap Deploy are affected by CVE-2024-34018?
CVE-2024-34018 affects Acronis Snap Deploy for Windows versions prior to build 4569.
4
What type of information can be disclosed due to CVE-2024-34018?
CVE-2024-34018 can potentially expose sensitive information stored in folders with insecure permissions.
5
Is there a patch available for CVE-2024-34018?
Yes, a patch is available in Acronis Snap Deploy build 4569 or later to mitigate CVE-2024-34018.