Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass

🗓️ 22 May 2024 03:45:00Reported by The Hacker NewsType 
thn
 thn🔗 thehackernews.com👁 38 Views

Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass. Update to version 12.1.2.172 now

Related
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication
26 Nov 202516:37
–githubexploit
GithubExploit		Exploit for Improper Authentication in Veeam Veeam_Backup_\&_Replication
10 Jun 202406:12
–githubexploit
GithubExploit		Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication
18 Mar 202316:20
–githubexploit
GithubExploit		Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication
5 Jul 202414:00
–githubexploit
GithubExploit		Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication
23 Mar 202316:08
–githubexploit
ATTACKERKB		CVE-2023-27532
10 Mar 202300:00
–attackerkb
BDU FSTEC		The vulnerability of the executable file Veeam.Backup.Service.exe allows a hacker to gain unauthorized access to systems that use Veeam Backup & Replication for cloud, virtual, and physical systems protection.
24 Mar 202300:00
–bdu_fstec
BDU FSTEC		The vulnerability in the web interface of the Veeam Backup Enterprise Manager component allows a perpetrator to escalate their privileges.
27 May 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Veeam Agent for Microsoft Windows data backup tool stems from authentication procedures that have flaws, allowing attackers to exploit their privileges.
18 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of Veeam Backup & Replication’s protection mechanisms for cloud, virtual, and physical systems stems from deficiencies in access control. This allows attackers to gain unauthorized access to the NTLM hash of the Enterprise Manager service account.
3 Oct 202400:00
–bdu_fstec
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 May 2024 03:53Current
9.5High risk
Vulners AI Score9.5
CVSS 3.17.5
CVSS 39.9
EPSS0.7761
SSVC
veeam backup enterprise managersecurity flawauthentication bypasscve-2024-29849vulnerabilityntlm relaycve-2024-29850local privilege escalationcve-2024-29853remote code executioncve-2024-29212threat actorsfin7cubaransomwarepatch vulnerabilities
38