CVE-2025-24832: Medium severity acronis backup vulnerability
Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-24832?
CVE-2025-24832 has a moderate severity rating due to the potential for arbitrary file overwriting.
How do I fix CVE-2025-24832?
To fix CVE-2025-24832, update the Acronis Backup plugin for cPanel & WHM (Linux) to version 1.8.4.866 or later, or version 1.9.1.892 or later.
What products are affected by CVE-2025-24832?
CVE-2025-24832 affects the Acronis Backup plugin for cPanel & WHM (Linux) and the Acronis Backup extension for Plesk (Linux) up to specific versions.
What is the nature of the vulnerability in CVE-2025-24832?
CVE-2025-24832 is due to improper symbolic link handling allowing for arbitrary file overwriting during home directory recovery.
What are the risks associated with CVE-2025-24832?
The risks associated with CVE-2025-24832 include potential data loss and unauthorized access to sensitive files on compromised systems.