CVE-2024-34014

published 2024-11-11

CVE-2024-34014: Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM…

Priority P4 28 medium 5.5 CVSS 3.0

AV L AC L PR L UI N S U C N I H A N

Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
acronis	acronis_backup_extension_for_plesk	>= unspecified < 1.8.6.599	1.8.6.599
acronis	acronis_backup_plugin_for_cpanel_whm	>= unspecified < 1.8.3.818	1.8.3.818
acronis	acronis_backup_plugin_for_cpanel_whm	>= unspecified < 1.9.1.892	1.9.1.892
acronis	acronis_backup_plugin_for_directadmin	>= unspecified < 1.2.2.181	1.2.2.181

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-61