CVE-2024-42451
04.12.2024, 02:15
A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by calling a series of methods over an external protocol, ultimately retrieving the credentials using a malicious setup on the attacker's side. This exposes sensitive data, which could be used for further attacks, including unauthorized access to systems managed by the platform.Enginsight
Vendor | Product | Version |
---|---|---|
veeam | veeam_backup_\&_replication | 12.0.0.1402 ≤ 𝑥 < 12.3.0.310 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References