PT-2024-9517 · Veeam · Veeam Backup & Replication

Name of the Vulnerable Software and Affected Versions: Veeam Backup & Replication versions prior to 12.2 Description: A vulnerability in Veeam Backup & Replication allows low-privileged users to control and modify configurations on connected virtual infrastructure hosts. This includes the ability...

PT-2024-9559 · Veeam · Veeam Backup & Replication

Name of the Vulnerable Software and Affected Versions: Veeam Backup & Replication affected versions not specified Description: A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by calling a series of methods over...

Using Veeam Backup Software on Provisioning Services Server

While running Veeam software to backup Provisioning Services PVS servers, one of the PVS servers display status as Down in PVS server console regardless of whether the stream service is running. The following screen shot shows the server status in PVS console. The following screen shot shows the...

New Ransomware Group Exploiting Veeam Backup Software Vulnerability

A now-patched security flaw in Veeam Backup & Replication software is being exploited by a nascent ransomware operation known as EstateRansomware. Singapore-headquartered Group-IB, which discovered the threat actor in early April 2024, said the modus operandi involved the exploitation of...

PT-2024-9568 · Veeam · Veeam Backup & Replication

Name of the Vulnerable Software and Affected Versions: Veeam Backup & Replication affected versions not specified Description: A series of related high-severity vulnerabilities in Veeam Backup & Replication enables remote code execution RCE as the service account and extraction of sensitive...

Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication

It is an exploit module/toolkit targeting a web application. The...

The vulnerability of the Veeam Agent for Microsoft Windows data backup tool stems from authentication procedures that have flaws, allowing attackers to exploit their privileges.

The vulnerability of the Veeam Agent for Microsoft Windows data backup tool is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...

How to Make Veeam Kasten for Kubernetes Grafana Pod rootless

Purpose This article explains how to disable init-container in k10-grafana to run it as rootless. Cause Veeam Kasten for Kubernetes installation provides an instance of Grafana that is deployed automatically and can be used to query metrics from Kasten's Prometheus instance. This grafana pod is r...

Veeam Kasten for Kubernetes - Used Ports

Purpose This article provides information regarding network ports that are used for different internal services of the Veeam Kasten for Kubernetes application. Solution The following information of Veeam Kasten for Kubernetes services and network ports associated with them will help with port...

Veeam Kasten for Kubernetes Instant Recovery with Veeam Backup & Replication vPower NFS datastore

Purpose K10 Instant Recovery uses the Veeam Backup and Replication vPower NFS datastore to provide vSphere First Class Disks for storage. This feature enables "instant" recovery of workloads with Kubernetes. Solution The vPower NFS datastore is a fully functional datastore in the vSphere cluster...

Veeam Recovery Orchestrator Flaw Enables Forge of Valid JWT Tokens

...

How to Clean Up Veeam Kasten for Kubernetes Manual Backups

Purpose This article provides an overview of scenarios where out-of-schedule restorePoints are created and how to identify and remove them. Cause With Veeam Kasten for Kubernetes , there are multiple ways to take backups & exports. A manual backup/export from the application menu. A manual policy...

Veeam Kasten for Kubernetes Performance Troubleshooting Guide

Purpose This article documents two of the most common performance tuning settings for Veeam Kasten for Kubernetes. Veeam Kasten for Kubernetes uses helm parameters, which can be tuned to adjust performance. The default settings should suit most environments. However, in complex environments,...

Import Job Fails with "No kopia manifests found in the repository"

Challenge Import jobs fail with the error: No kopia manifests found in the repository Full error: "cause": "file": "kasten.io/k10/kio/collections/kopia/operations.go:144", "function": "kasten.io/k10/kio/collections/kopia.GetLatestSnapshot", "linenumber": 144, "message": "No kopia...

How to Exclude Applications from Dashboard & Compliance Reporting

Purpose This article provides steps to exclude system namespaces from the Veeam Kasten for Kubernetes dashboard and compliance reporting. Solution Explanation Veeam Kasten for Kubernetes automatically discovers all application namespaces of the cluster on which it is deployed. Each of these...

Veeam Addresses Critical Flaws, Urges Admins to Patch

...

Exploit for Use of Hard-coded Credentials in Veeam Recovery_Orchestrator

CVE-2024-29855 Veeam Recovery Orchestrator Authentication Bypa...

The vulnerability of the software recovery and backup console of Veeam Recovery Orchestrator allows a perpetrator to escalate their privileges.

The vulnerability of the software recovery and backup console of Veeam Recovery Orchestrator lies in the use of rigidly encoded credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain increased privileges...

Exports Don't Work After Veeam Kasten for Kubernetes Reinstall

Critical Warning The solution provided in this article results in data removal. These steps should only be followed when testing or evaluating Veeam Kasten for Kubernetes or if the existing data is no longer required. If you have any questions, please contact Support. Challenge Description: Jobs...

Option to Add Veeam Kasten for Kubernetes Does Not Appear in Veeam Backup & Replication

Challenge When attempting to add Veeam Kasten for Kubernetes to Veeam Backup & Replication, the option for Kasten does not appear in the Add Server options. Cause This issue may occur if: The Veeam Kubernetes Service is not running and needs to be started. The Kasten Plug-In is not installed. Thi...