Veeam Backup for Cloud Solutions Potential Data Loss

Challenge Possible data loss in backups created. Affected product versions: Veeam Plug-In for AWS 5.0.0.452 Veeam Plug-In for AWS 5.1.0.39 Veeam Plug-In for Microsoft Azure 4.0.0.679 Veeam Plug-In for Google Cloud 3.0.0.859 Cause While creating backups to object storage, data loss may occur withi...

GSD-2022-1007820 ext4: update the backup superblock's at the end of the online resize

ext4: update the backup superblock's at the end of the online resize This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

PT-2022-36075 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to the ext4 file system and its online resize functionality. It involves updating the backup superblock at the end of the online resize process. The actual impact and...

How to Recover Account Credentials From the Veeam Backup & Replication Database

Select the tab that matches the deployed version of Veeam Backup & Replication. 1. Backup & Replication 12.1 - 12.3.2 2. Backup & Replication 12 Security Statement It is critical to understand the difference between password validation and providing software with the capability to utilize...

Driver Disk for Qlogic fastlinq 8.70.12.0 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers on Dell hardware who are running the Citrix Hypervisor 8.2 LTSR release who use Qlogic's fastlinq driver and wish to use the latest version of the following: Driver Module| Version ---|--- qed| 8.70.12.0 qede| 8.70.12.0 qedf| 8.70.12.0 qedi| 8.70.12....

SQL injection vulnerability in configuration backup feature

An improper neutralization of special elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 in FortiADC may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests...

Upgrading the SQL Database Engine Software (Microsoft SQL Server or PostgreSQL) Used by Veeam Backup & Replication

Support Scope This article is provided as a courtesy to give customers a high-level explanation of how to upgrade the underlying SQL database engine used to host the Veeam Backup & Replication configuration database. Per the Veeam Customer Support Policy, section 10: Support for Veeam Configurati...

CVE-2022-43549

Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms...

CVE-2022-43549

Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms...

Authentication flaw

Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms...

Syncovery For Linux Web-GUI Login Utility

This module will attempt to authenticate to Syncovery File Sync & Backup Software For Linux Web-GUI. Module Options msf use auxiliary/scanner/http/syncoverylinuxlogin msf auxiliarysyncoverylinuxlogin show actions ...actions... msf auxiliarysyncoverylinuxlogin set ACTION msf...

CVE-2022-43549

Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms...

CVE-2022-43549: Improper Authentication

Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms...

PT-2022-26960 · Veeam · Veeam Backup For Google Cloud

Name of the Vulnerable Software and Affected Versions: Veeam Backup for Google Cloud versions 1.0 through 3.0 Description: The issue is related to improper authentication, allowing attackers to bypass authentication mechanisms. This could potentially lead to unauthorized access. Recommendations:...

Huawei HarmonyOS path traversal vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a path traversal vulnerability in the backup module. An attacker can exploit the...

CVE-2022-43549

CVE-2022-43549 : Improper authentication in Veeam Backup for Google Cloud (versions 1.0 and 3.0) allows an attacker to bypass authentication, rated CRITICAL (CVSSv3.1: 9.8). Affected component is the Backup Appliance used in Veeam Backup for Google Cloud. The vulnerability enables unauthorized ac...

CVE-2022-43549

Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms...

CVE-2022-35508

Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG are vulnerable to SSRF when proxying HTTP requests between pvepmgproxy and pvepmgdaemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSRF and file disclosure of any files on the server. Also, in Proxmox...

Server side request forgery (ssrf)

Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG are vulnerable to SSRF when proxying HTTP requests between pvepmgproxy and pvepmgdaemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSRF and file disclosure of any files on the server. Also, in Proxmox...

CVE-2022-35508

Proxmox Virtual Environment PVE and Proxmox Mail Gateway PMG are vulnerable to SSRF when proxying HTTP requests between pvepmgproxy and pvepmgdaemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSRF and file disclosure of any files on the server. Also, in Proxmox...