Description
Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892.
CVSS breakdown
CVSS 3.0
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected products
- Acronis / Acronis Backup plugin for cPanel & WHMunspecified – 1.8.3.818
- Acronis / Acronis Backup plugin for cPanel & WHMunspecified – 1.9.1.892
References
- VENDOR_ADVISORYhttps://security-advisory.acronis.com/advisories/SEC-7601
Updated 17m ago · 8 sources