CVE-2024-8767

published 2024-09-17

CVE-2024-8767: Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel &…

Priority P3 53 critical 9.9 CVSS 3.0

AV N AC L PR L UI N S C C H I H A H

Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
acronis	acronis_backup_extension_for_plesk	>= unspecified < 555	555
acronis	acronis_backup_plugin_for_cpanel_whm	>= unspecified < 619	619
acronis	acronis_backup_plugin_for_directadmin	>= unspecified < 147	147

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-250