CVE-2024-34014

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-61

Affected software

No affected versions have been published.

Timeline

Published
Nov 11, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-340153.3Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis BCVE-2024-340166.5Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (WindoCVE-2024-340177.3Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before buiCVE-2024-340185.5Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) befoCVE-2024-340197.3Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before buiCVE-2024-34025.4A stored Cross-Site Scripting (XSS) vulnerability existed in version (20240121) of gaizhenbiao/chuanhuchatgpt due to inadequate sanitizationCVE-2024-340206.5A stack-based buffer overflow was found in the putSDN() function of mail.c in hcode through 2.1.CVE-2024-340216.8Unrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN routers. A specially crafted file may be uploadeCVE-2024-340226.7Improper Access Control in some Thunderbolt(TM) Share software before version 1.0.49.9 may allow an authenticated user to potentially enableCVE-2024-340238.4Untrusted pointer dereference in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilegCVE-2024-340246.3Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unCVE-2024-340259.8CyberPower PowerPanel business application code contains a hard-coded set of authentication credentials. This could result in an attacker b