Vigie VulnEuropean-hosted Vulnerability DB

CVE-2024-8767

At a glance

Severity
CRITICAL 9.9
EPSS
EPSS 0.48 % · percentile 41 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
Acronis
NVD status
Deferred

Description

Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147.

Scores

VersionScoreVectorScored by
CVSS 3.0CRITICAL 9.9CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HAcronis
CVSS 3.0CRITICAL 9.9CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HNVD · security@acronis.com (Secondary)

Weaknesses (CWE)

European references

Affected products

ProductVersions
Acronis · Acronis Backup plugin for cPanel & WHMaffected unspecified < 619
Acronis · Acronis Backup extension for Pleskaffected unspecified < 555
Acronis · Acronis Backup plugin for DirectAdminaffected unspecified < 147

References

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD