CVE-2024-8767: Critical severity acronis backup vulnerability
Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8767?
CVE-2024-8767 has been classified as a medium-severity vulnerability due to its potential for sensitive data disclosure.
How do I fix CVE-2024-8767?
To fix CVE-2024-8767, upgrade to the latest builds of the affected Acronis Backup products: 619 for cPanel & WHM, 555 for Plesk, and 147 for DirectAdmin.
What products are affected by CVE-2024-8767?
CVE-2024-8767 affects the Acronis Backup plugin for cPanel & WHM, Acronis Backup extension for Plesk, and Acronis Backup plugin for DirectAdmin prior to specific builds.
What causes CVE-2024-8767?
CVE-2024-8767 is caused by unnecessary privileges assignment within the affected Acronis Backup products.
Can CVE-2024-8767 lead to data loss?
Yes, CVE-2024-8767 can lead to data loss or manipulation since it involves sensitive data disclosure.