{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T09:18:12.891","vulnerabilities":[{"cve":{"id":"CVE-2024-34014","sourceIdentifier":"security@acronis.com","published":"2024-11-11T14:15:14.693","lastModified":"2026-06-17T07:32:44.940","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.2.181."},{"lang":"es","value":"Sobrescritura arbitraria de archivos durante la recuperación debido a un manejo incorrecto de enlaces simbólicos. Los siguientes productos se ven afectados: Acronis Backup plugin for cPanel & WHM (Linux) anterior a la compilación 818, Acronis Backup extension for Plesk (Linux) anterior a la compilación 599, Acronis Backup plugin for DirectAdmin (Linux) anterior a la compilación 181."}],"affected":[{"source":"security@acronis.com","affectedData":[{"vendor":"Acronis","product":"Acronis Backup plugin for cPanel & WHM","defaultStatus":"unaffected","platforms":["Linux"],"versions":[{"version":"unspecified","lessThan":"1.8.3.818","versionType":"semver","status":"affected"}]},{"vendor":"Acronis","product":"Acronis Backup plugin for cPanel & WHM","defaultStatus":"unaffected","platforms":["Linux"],"versions":[{"version":"unspecified","lessThan":"1.9.1.892","versionType":"semver","status":"affected"}]},{"vendor":"Acronis","product":"Acronis Backup extension for Plesk","defaultStatus":"unaffected","platforms":["Linux"],"versions":[{"version":"unspecified","lessThan":"1.8.6.599","versionType":"semver","status":"affected"}]},{"vendor":"Acronis","product":"Acronis Backup plugin for DirectAdmin","defaultStatus":"unaffected","platforms":["Linux"],"versions":[{"version":"unspecified","lessThan":"1.2.2.181","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"security@acronis.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-11T15:57:56.705448Z","id":"CVE-2024-34014","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@acronis.com","type":"Secondary","description":[{"lang":"en","value":"CWE-61"}]}],"references":[{"url":"https://security-advisory.acronis.com/advisories/SEC-7592","source":"security@acronis.com"}]}}]}