CVE-2024-34015CWE-61

Sensitive information disclosure during file browsing due to improper symbolic link handling

Low · published November 11, 2024

CVSS v3.0
3.3
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892.

The record
Technical detail
CVSS v3.0
3.3 · LOW
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00205 · 9.9th percentile
Weakness
CWE-61 · UNIX Symbolic Link (Symlink) Following
Published
2024-11-11T13:21Z
EPSS history
Timeline
  • 11 NOV 13:21Z
    Sensitive information disclosure during file browsing due to improper symbolic link handling
    cvelistv5