CVE-2024-56169

Fort Validator (Fort) versions up to 1.6.4 are affected by a validation integrity issue where the backup cache is only used to save bandwidth, and there is no viable fallback if a fetch fails or yields incorrect files. This leads to incomplete route-origin validation data. Upgrading to 2.0.0 or l...

CVE-2024-56169

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI Relying Parties such as Fort are supposed to maintain a backup cache of the remote RPKI data. This can be employed as a fallback in case a new fetch fails or yields incorrect files. However, the product currently...

CVE-2024-56169

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI Relying Parties such as Fort are supposed to maintain a backup cache of the remote RPKI data. This can be employed as a fallback in case a new fetch fails or yields incorrect files. However, the product currently...

Vulnerability of Veeam Backup & Replication virtual and physical systems, due to authentication procedures that lack sufficient protection. This allows attackers to alter multi-factor authentication parameters and circumvent existing security restrictions.

The vulnerability of virtual and physical systems managed by Veeam Backup & Replication is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to alter the parameters of Multi-Factor Authentication MFA and circumvent existing security...

The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems lies in the fact that confidential information is stored in an open manner, allowing attackers to disclose the protected data.

The vulnerability of the Veeam Backup & Replication protection tool for cloud, virtual, and physical systems lies in the storage of confidential information in an open manner. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Vulnerability of Veeam Backup & Replication virtual and physical systems, related to incorrect restrictions on path names to the restricted access catalog, allows attackers to increase their privileges (LPE).

The vulnerability in Veeam Backup & Replication and physical systems is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker to increase their privileges LPE...

CVE-2024-56142

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges equivalent to those of pghoard, allowing for unintended path traversal. Depending on th...

CVE-2024-56142 Path Traversal in pghoard

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges equivalent to those of pghoard, allowing for unintended path traversal. Depending on th...

CVE-2024-56142

The CVE-2024-56142 issue affects pghoard, a PostgreSQL backup/restore daemon that stores backups in cloud object stores. It describes a path traversal vulnerability that could allow an attacker to obtain disk access with privileges equivalent to pghoard, potentially leading to disclosure of sensi...

PGHoard 路径遍历漏洞

PGHoard is a PostgreSQL backup daemon and restore tool from Aiven Open Source. It is used to store backup data in cloud object storage. A path traversal vulnerability exists in PGHoard 2.2.2a and earlier versions, which stems from a vulnerability that allows an attacker to gain disk access with t...

"Failed to convert [Not Settable] to UUID."

Challenge Veeam Backup & Replication task interacting with Proxmox VE host fails with: Failed to convert Not Settable to UUID Cause This occurs when the Proxmox VE host has an empty bios UUID, or the reported bios UUID value is unparsable. Solution 1. Remove workers if any from the Veeam Backup &...

Multiple vulnerabilities in SHARP routers

Overview SHARP routers contain multiple vulnerabilities listed below. OS command injection vulnerability in the HOST name configuration screen CWE-78 - CVE-2024-45721 The hidden debug function is enabled CWE-489 - CVE-2024-46873 Buffer overflow vulnerability in the hidden debug function CWE-120 -...

CVE-2024-56086

An issue was discovered in Logpoint before 7.5.0. Authenticated users can inject payloads in Report Templates. These are executed when the backup process is initiated, leading to Remote Code Execution...

The vulnerability of the backup and data recovery software for Veeam Service Provider Console (VSPC) users on remote and cloud-based clients stems from insufficient protection of operational data, allowing attackers to exploit this weakness to disclose sensitive information.

The vulnerability of the backup and data restoration software for Veeam Service Provider Console VSPC for remote and cloud-based customers is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information by...

The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems lies in its ability to allow unauthorized access to read, modify, or delete data stored in memory. This vulnerability enables attackers to gain unauthorized access to these data.

The vulnerability of Veeam Backup & Replication’s protection for cloud, virtual, and physical systems stems from the restoration of unreliable data in memory due to the lack of authenticity verification for a critical function. Exploiting this vulnerability can allow an attacker operating remotel...

The vulnerability of the remote management interface of the Veeam Backup & Replication software for cloud, virtual, and physical systems allows a perpetrator to disclose protected information.

The vulnerability of the remote management interface of the Veeam Backup & Replication software for cloud, virtual, and physical systems is related to insufficient protection of registration data. Exploiting these vulnerabilities could allow a malicious actor to disclose the protected information...

The vulnerability of the microprogrammed software of the multifunctional wireless access points Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO lies in the ability to restore a modified backup configuration. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the microprogrammed software in multifunctional wireless access points of Advantech EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO lies in the ability to restore a modified backup configuration. Exploiting this vulnerability allows an attacker operating remotely to...

The vulnerability of the Veeam Backup Enterprise Manager management service, a component of Veeam Backup & Replication, which protects cloud-based, virtual, and physical systems, allows attackers to escalate their privileges and cause service interruptions.

The vulnerability of the Veeam Backup Enterprise Manager management service for cloud, virtual, and physical system protection solutions lies in the absence of an authentication process. Exploiting this vulnerability could allow attackers to increase their privileges and cause service interruptio...

dkms 3.1.3-1 Causes Backup to Fail With “Veeam snapshot kernel module not found”

Article Applicability This article is specifically regarding RPM-based Linux distros i.e., Oracle, Fedora, and Tumbleweed that have dkms 3.1.3 installed: root@localhost rpm -qa | grep dkms dkms-3.1.3 -1.el9.noarch Challenge Veeam Agent for Linux backup job fails with the following errors when dkm...

Logpoint 安全漏洞

Logpoint is a network security application from the Danish company Logpoint. A security vulnerability exists in Logpoint versions prior to 7.5.0 that originates from an authenticated user being able to inject payloads into report templates that are executed when the backup process is initiated,...