Description
Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Acronis | Acronis Backup plugin for cPanel & WHM | unspecified – < 619 | 619 |
| Acronis | Acronis Backup extension for Plesk | unspecified – < 555 | 555 |
| Acronis | Acronis Backup plugin for DirectAdmin | unspecified – < 147 | 147 |
References
- SEC-4976 vendor-advisory