15187 matches found
Veeam Agent for Microsoft Windows Backup Session Failure is Reported as Successful
Challenge In certain rare circumstances, a failed backup retry session for a Veeam Agent for Microsoft Windows job operating in Managed by backup server mode may be reported as a Success. Impacted Configuration Veeam Backup & Replication 12 build 12.0.x Deployed. Veeam Agent for Microsoft Windows...
PT-2023-7889
Name of the Vulnerable Software and Affected Versions Backup Migration plugin for WordPress versions up to, and including, 1.3.7 Description The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the...
How to Configure Advanced Syslog Integration Options
Purpose This article documents advanced configuration options for syslog integration with Veeam Backup & Replication, a new feature starting in version 12.1. Solution The following advanced configuration options are available: Add BOM Before MSG Field Add the Unicode byte order mask BOM before th...
Backup Warning: "repository time shift detected, immutability flag cannot be set."
Challenge A Backup or Backup Copy job using an Immutable Hardened Linux Repository displays the warning: A problem occurred during setting the immutable flag: repository time shift detected, immutability flag cannot be set. Please refer to KB4482 for more details Cause This warning is displayed...
Release Information for Veeam Backup & Replication 12.1 and Updates
This update was superseded by Veeam Backup & Replication 12.3. Release Information 12.1.2.172 2024-05-21 Security Vulnerabilities Indicated severity values are CVSS 3.1 scores. Veeam Backup Enterprise Manager VBEM CVE-2024-29849 | Severity: Critical 9.8 This vulnerability in VBEM allows an...
PT-2023-7927 · Hitachi Vantara · Hitachi Vantara Hnas
Name of the Vulnerable Software and Affected Versions: Hitachi Vantara HNAS versions prior to 14.8.7825.01 Description: The issue allows authenticated users to access sensitive information through Insecure Direct Object Reference IDOR. This can be achieved by manipulating URLs, enabling users in...
UBUNTU-CVE-2023-34854
Authenticated remote code execution via backup/restore in HotelDruid...
[SECURITY] [DLA 3681-1] amanda security update
Debian LTS Advisory DLA-3681-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost December 03, 2023 https://wiki.debian.org/LTS Package : amanda Version : 1:3.5.1-2+deb10u2 CVE ID : CVE-2022-37703 CVE-2022-37705 CVE-2023-30577 Debian Bug : 1021017 1029829 1055253 Multip...
Qakbot Takedown Aftermath: Mitigations and Protecting Against Future Threats
The U.S. Department of Justice DOJ and the FBI recently collaborated in a multinational operation to dismantle the notorious Qakbot malware and botnet. While the operation was successful in disrupting this long-running threat, concerns have arisen as it appears that Qakbot may still pose a danger...
Backup Migration < 1.3.7 - Unauthenticated Arbitrary File Download to Sensitive Information Exposure
Description The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the BMIBACKUP case of the handledownloading function in all versions up to, and including, 1.3.6. This makes it possible for unauthenticated attackers...
WordPress Backup Migration Plugin <= 1.3.6 is vulnerable to Sensitive Data Exposure
Software Backup Migration Type Plugin Vulnerable versions = 1.3.6 Fixed in 1.3.7 OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2023-6266 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 7df0ea44f3d7 Credits Rafshanzani Suhada...
Security Bulletin: AIX is vulnerable to arbitrary command execution due to invscout (CVE-2023-45168)
Summary A vulnerability in the AIX invscout command could allow a non-privileged local user to execute arbitrary commands CVE-2023-45168. Vulnerability Details CVEID:CVE-2023-45168 DESCRIPTION: IBM AIX could allow a non-privileged local user to exploit a vulnerability in the invscout command to...
CVE-2023-45050
CVE-2023-45050 is a Cross-site Scripting (Stored XSS) in Automattic Jetpack – WP Security, Backup, Speed, & Growth (Jetpack) up to version 12.8-a.1. Root cause: improper neutralization of input during web page generation. Affected product: Jetpack plugin for WordPress. Public fix: version 12.8-a....
AIX is vulnerable to arbitrary command execution due to invscout
IBM SECURITY ADVISORY First Issued: Thu Nov 30 10:49:53 CST 2023 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/invscoutadvisory5.asc Security Bulletin: AIX is vulnerable to arbitrary command execution due to invscout CVE-2023-45168...
PT-2023-32632 · Tyler Technologies · Tyler Technologies Court Case Management Plus
Name of the Vulnerable Software and Affected Versions: Tyler Technologies Court Case Management Plus affected versions not specified Description: The issue concerns insufficient permission checks, allowing unauthorized access to sensitive information. Specifically, backups may be stored in a...
EFS Backup Policy Fails With "Not authorized to perform DeleteRecoveryPoint"
Challenge An EFS Backup Policy fails with the message: User: arn:aws:sts:::assumed-role/VEEAM-BACKUP-FOR-AWS-IAM-ROLE-NAME/VeeamBackupSession is not authorized to perform: backup:DeleteRecoveryPoint on resource: arn:aws:backup:AWS-REGION::recovery-point: with an explicit deny in a resource-based...
Important: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.0 security update
OpenShift API for Data Protection OADP 1.3.0 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Remote Code Execution
HotelDruid is vulnerable to Remote Code Execution RCE. The vulnerability is via the backup/restore feature. It can lead to compromising Confidentiality, Integrity and Availability of the system...
Updated mariadb packages fix a security vulnerability
Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash complete DOS of MySQL Server. Additonally a whole bunch of fixes to InnoDB, Replication, Optimizer, Galera, Spider, Backup,... have been applied. See the official release not...