CVEvulnerability

CVE-2024-29851

7.2 HIGH Published 2024-05-22 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-05-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.2 HIGH — CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-294

Description

Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account.

Affected configurations

• veeam veeam backup \& replication (< 12.1.2.172)

Related

Weakness · CWE (1)

  • CWE-294 Authentication Bypass by Capture-replay weakness

References