Description
Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Acronis | Acronis Backup plugin for cPanel & WHM | unspecified – < 1.8.4.866, unspecified – < 1.9.1.892 | 1.8.4.866 |
| Acronis | Acronis Backup extension for Plesk | unspecified – < 1.8.7.615 | 1.8.7.615 |
References
- SEC-7649 vendor-advisory