CVE-2024-8767

{"id": "CVE-2024-8767", "cveTags": [], "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "security@acronis.com", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}]}, "published": "2024-09-17T09:15:03.423", "references": [{"url": "https://security-advisory.acronis.com/advisories/SEC-4976", "source": "security@acronis.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "security@acronis.com", "description": [{"lang": "en", "value": "CWE-250"}]}], "descriptions": [{"lang": "en", "value": "Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147."}, {"lang": "es", "value": "Divulgaci\u00f3n y manipulaci\u00f3n de datos confidenciales debido a la asignaci\u00f3n innecesaria de privilegios. Los siguientes productos se ven afectados: complemento de Acronis Backup para cPanel y WHM (Linux) anterior a la compilaci\u00f3n 619, extensi\u00f3n de Acronis Backup para Plesk (Linux) anterior a la compilaci\u00f3n 555, complemento de Acronis Backup para DirectAdmin (Linux) anterior a la compilaci\u00f3n 147."}], "lastModified": "2024-09-20T12:31:20.110", "sourceIdentifier": "security@acronis.com"}