Lucene search

K
githubexploitD5A83A35-A33D-5322-8A98-6B7F9D483034
HistoryJul 05, 2024 - 2:00 p.m.

Exploit for Missing Authentication for Critical Function in Veeam Veeam Backup & Replication

2024-07-0514:00:48
110
veeam backup
remote command execution
credential leak
cve-2023-27532
rce
visual studio
remote server
plaintext credentials
local system privileges
code white gmbh
huntress
y4er

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

Low

EPSS

0.031

Percentile

91.2%

Forked Version (RCE Only)

Forked repository and removed the c…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.6

Confidence

Low

EPSS

0.031

Percentile

91.2%