Description
Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Acronis | Acronis Backup plugin for cPanel & WHM | unspecified – < 1.8.3.818, unspecified – < 1.9.1.892 | 1.8.3.818 |
| Acronis | Acronis Backup extension for Plesk | unspecified – < 1.8.6.599 | 1.8.6.599 |
| Acronis | Acronis Backup plugin for DirectAdmin | unspecified – < 1.2.2.181 | 1.2.2.181 |
Advisories 1
- WID-SEC-2024-3400 Acronis Cyber Backup Plugins: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
References
- SEC-7592 vendor-advisory