PT-2023-6894 · Veeam · Veeam One

Name of the Vulnerable Software and Affected Versions: Veeam ONE affected versions not specified Description: A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection used to access its configuration database, potentially leading to remote co...

Veeam Agent for Microsoft Windows 2.x < 4.0.2.2208 / 5.x < 5.0.3.4708 Privilege Escalation

The version of Veeam Agent for Microsoft Windows installed on the remote Windows host is affected by a privilege escalation vulnerability. Deserialization of untrusted data allows local users to run arbitrary code with local system privileges. Note that Nessus has not tested for this issue but ha...

Uninstall or Upgrade of Veeam Agent for Microsoft Windows Fails Due to Missing MSI

Challenge When attempting to uninstall or upgrade Veeam Agent for Microsoft Windows , the Windows dialog box appears stating: The feature you are trying to use is on a network resource that is unavailable. Click OK to try again, or enter an alternate path to a folder containing the installation...

The vulnerability of the software for monitoring and managing virtualization infrastructure based on the Veeam Management Pack platform for Microsoft System Center exists due to the lack of protective measures taken against the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software for monitoring and managing virtualization infrastructure based on the Veeam Management Pack platform for Microsoft System Center exists due to the lack of protective measures taken against the website structure. Exploiting this vulnerability allows a malicious...

Restore to EC2 Error: "Failed to validate machine: Cannot find a suitable image for the restored machine."

Issue Resolved in Veeam Backup & Replication 12.1 The issue documented in this article was resolved starting in Veeam Backup & Replication 12.1. Veeam strongly encourages all customers to update to the latest version. Challenge A Restore to Amazon EC2 fails with the error: Failed to validate...

Hotfix to Improve Handling of Self-Signed Certificates Used By On-Prem Object Storage with IAM/STS Endpoints, Agent, VM jobs, and Cloud Connect

Article Applicability The hotfix discussed in this article is only necessary when using an on-prem object storage appliance that utilizes self-signed certificates, and you are being affected in the ways described in the Resolved Issues section. If you are not experiencing the errors listed in thi...

'Unauthorized to make an AWS request.' When Using AWS Israel Region

Challenge When creating a new AWS S3 Object Storage Repository with the recently launched AWS Israel region il-central-1, configuring a Helper Appliance fails with the error: Unauthorized to make an AWS request. Cause This error occurs because the AWS SDK libraries used by Veeam Backup &...

Rescan of Windows Machine in Protection Group Fails With "The network path was not found."

Article Applicability This article addresses situations in which credential-based authentication is used to add a Windows machine to a Veeam Agent for Microsoft Windows protection group. The troubleshooting steps below address connectivity failures that occur when Veeam Backup & Replication...

Veeam Backup for Google Cloud Backup Stuck at 0%

Challenge Backup policies in Veeam Backup for Google Cloud are stuck at 0% progress. Cause This situation is caused by Google recently updating the latest Ubuntu Linux machine image available in their cloud to ubuntu-2204-jammy-v20230829. The existing worker VM methods utilized in Veeam Backup fo...

veeam.com Open Redirect vulnerability OBB-3679278

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Validator CLI Tool Fails to Process VMs in Per-machine backup with separate metadata files

Challenge When attempting to use the Veeam Backup Validator command-line tool to validate the VMs contained within a job that was using the Per-machine backup with separate metadata files aka True Per-VM backup chain format, the Veeam Backup Validator tool throws the error: Cannot find last point...

Security Issue in Microsoft Azure Plug-In for Veeam Backup & Replication

Issue Details This article highlights a security-related issue in Microsoft Azure Plug-In for Veeam Backup & Replication 12.1.5.99 that may allow a user accessing the Veeam Backup & Replication server to obtain the administrator credentials of the Veeam Plug-In for Microsoft Azure backup applianc...

Veeam Backup & Replication support for VMware Cloud Director

Purpose This article provides information about compatibility between VMware Cloud Director and Veeam Backup & Replication. Solution The table below provides VMware Cloud Director compatibility information for the most recent version of Veeam Backup & Replication. Older VMware Cloud Director/vClo...

Agent Backup Job Fails With "Veeam Backup and Replication version is not compatible with Veeam Agent for Windows"

Challenge After upgrading Veeam Agent for Microsoft Windows , the backup job fails to run and displays the error message: Error: Managed session has failed: Veeam Backup and Replication version is not compatible with Veeam Agent for Windows. Cause This error occurs when the version of Veeam Agent...

Veeam Backup for Microsoft 365 Updater Fails With: "Error opening installation log file."

Challenge For Veeam Backup for Microsoft 365 deployments from AWS Marketplace or Microsoft Marketplace, when attempting to install discovered updates or when the auto-updater attempts to update Veeam Backup for Microsoft 365, the update process fails with the error: Error opening installation log...

How to Remove Servers From Veeam Backup & Replication Console Launcher

Purpose This article documents the procedure for removing previously used backup server entries from the Veeam Backup & Replication Console Launcher. Solution Veeam Backup & Replication Console settings are stored per user in the file:...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-38035 Ivanti Sentry Authentication Bypass Vulnerability CVE-2023-27532 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function...

Cuba Ransomware Targets U.S. with Veeam Exploit

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Cuba ransomware has targeted attacks on critical infrastructure organizations in the United States and IT enterprises across Latin America. In order to acquire credentials, it employs a blend of old...

Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network perimeter to obtain encrypted credentials stored in the configuration database. This may...

Full Restore Point Generated by Veeam Agent for Microsoft Windows Cluster Backup Is Larger Than Source Cluster

Challenge The Backup Job for a Failover Cluster, or its associated Backup Copy Job, generates full .vbk restore points that are larger than the source Failover Cluster. Cause During the cluster backup, Veeam Agent for Microsoft Windows will deduplicate the blocks within shared disks. However, if...