Description
A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating privileges to system-level access. This allows the attacker to upload files to the server with elevated privileges. The vulnerability exists because remote calls bypass permission checks, leading to full system compromise.
INFO
Published Date :
2024-12-04T01:06:04.654Z
Last Modified :
2024-12-04T16:03:26.578Z
Source :
hackerone
AFFECTED PRODUCTS
The following products are affected by CVE-2024-42452 vulnerability.
| Vendors | Products |
|---|---|
| Veeam |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-42452.
| URL | Resource |
|---|---|
| https://www.veeam.com/kb4693 |
|
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact