Veeam Backup & Replication Local Privilege Escalation Vulnerability

Challenge The vulnerability allows any local Windows user with low privileges, such as the ones provided to an anonymous IIS's virtualhost user, to access Veeam Backup logfiles and extract the password, used to run Veeam components, which is stored as a doublebase64 encoded string. Cause The...