Release Information for Veeam Backup for Nutanix AHV Plug-In Hotfix (12.6.0.636)

Requirements To upgrade to Veeam Backup for Nutanix AHV 6.1, download the installer below and run it on the Veeam Backup & Replication server that manages the AHV Backup Appliances. The Veeam Backup for Nutanix AHV 6.1 Plug-In must be installed before updating the Nutanix AHV Backup Appliance. Yo...

Multi Branch School Management System 3.5 Backup Disclosure

============================================================================================================================================= | Title : Multi Branch School Management System 3.5 Backup Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...

PT-2024-14787 · Synology · Synology Active Backup For Business Agent

Name of the Vulnerable Software and Affected Versions: Synology Active Backup for Business Agent versions prior to 2.7.0-3221 Description: The issue involves missing authentication for a critical function in the proxy settings functionality, allowing local users to obtain user credentials via...

Complete Multi Hospital Management System 1.0 Backup Disclosure

============================================================================================================================================= | Title : Complete Multi Hospital Management System 1.0 Backup Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...

PT-2024-14788

Name of the Vulnerable Software and Affected Versions Synology Active Backup for Business Agent versions prior to 2.7.0-3221 Description The issue concerns a missing encryption of sensitive data vulnerability in the login component. This allows adjacent man-in-the-middle attackers to obtain user...

Minimum supported OS version for Veeam VSS Hardware Provider is Microsoft Server 2012 (64-bit only).

Challenge An attempt to rescan, upgrade, or update the Veeam Backup Server fails with the error: Minimum supported OS version for Veeam VSS Hardware Provider is Microsoft Server 2012 64-bit only. Cause This issue occurs because an entry in the Configuration Database causes the Veeam Backup &...

PT-2024-14785 · Synology · Synology Active Backup For Business Agent

Name of the Vulnerable Software and Affected Versions: Synology Active Backup for Business Agent versions prior to 2.6.3-3101 Description: The issue is related to a missing authentication vulnerability in the logout functionality. This allows local users to logout the client via unspecified...

PT-2024-11895 · Synology · Synology Drive Client

Name of the Vulnerable Software and Affected Versions: Synology Drive Client versions prior to 3.4.0-15721 Description: A buffer copy without checking the size of the input, also known as a 'Classic Buffer Overflow', exists in the backup task management functionality. This issue allows local user...

PT-2024-14786 · Synology · Synology Active Backup For Business Agent

Name of the Vulnerable Software and Affected Versions: Synology Active Backup for Business Agent versions prior to 2.7.0-3221 Description: A missing encryption issue exists in the settings functionality of Synology Active Backup for Business Agent, allowing local users to obtain user credentials...

PT-2024-11893

Name of the Vulnerable Software and Affected Versions Synology Drive Client versions prior to 3.4.0-15721 Description The issue is an out-of-bounds write vulnerability in the backup task management functionality. This allows local users with administrator privileges to execute arbitrary commands...

Hot Backup File MongoDB Unauthorized Access

The vulnerability of the Hot Backup File component in the MongoDB database management system relates to the possibility for users with limited privileges to download backup files, along with obtaining a unique identifier for the backup copy. Exploiting this vulnerability could allow an attacker,...

Reservation Management System 1.0 Backup Disclosure

============================================================================================================================================= | Title : Reservation Management System 1.0 Backup Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...

Proxmox VE Compatibility with Veeam Backup Server OS Server 2012 and 2012 R2

Article Applicability This article is relevant only when the machine where Veeam Backup & Replication is installed uses either Server 2012 or Server 2012 R2. Challenge After adding Proxmox VE PVE hosts to Veeam Backup & Replication, the workers are deployed, but the testing phase fails with the...

Veeam Service Provider Console NTLM Authentication Bypass

The vulnerability of the NTLM protocol implementation in the backup and recovery software for remote and cloud-based Veeam Service Provider Consoles is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures an...

CVE-2024-9004

A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function of the file /view/DBManage/BackupServercommit.php. The manipulation of the argument host leads to os command injection. It is possible to launch the attack remotely. The exploi...

CVE-2024-9004 D-Link DAR-7000 Backup_Server_commit.php os command injection

A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function of the file /view/DBManage/BackupServercommit.php. The manipulation of the argument host leads to os command injection. It is possible to launch the attack remotely. The exploi...

Error: ".NET (`dotnet-`) must be added to the blacklist to prevent unattended upgrades that could impact the availability of the Linux proxy."

Challenge Attempting to add a Linux-base proxy in Veeam Backup for Microsoft 365 fails with the error: Error: .NET dotnet- must be added to the blacklist to prevent unattended upgrades that could impact the availability of the Linux proxy. Cause This error occurs when the proxy deployment process...

D-Link DAR-7000: Operating System Command Injection Vulnerability

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. An OS command injection vulnerability exists in the D-Link DAR-7000 20240912 and earlier versions, which stems from the parameter host in the file /view/DBManage/BackupServercommit.php that can lead to OS command...

Acronis Backup Data Restoration Privilege Escalation

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers, as well as for cPanel & WHM, Plesk, and DirectAdmin operating systems on Linux, is related to errors in privilege management. Exploiting this vulnerability can allow attackers to...

Release Information for Veeam Plug-In for Microsoft Azure 7 Cumulative Patches

Requirements Please confirm that you are running version Veeam Plug-In for Microsoft Azure v7 build 7.0.0.467 or later before upgrading. You can find the currently installed build number Product version in the About section under Configuration | Support Information | Updates. After installing Vee...