High WID-SEC-2024-1204 4 CVEs

Veeam Backup Enterprise Manager: Mehrere Schwachstellen

Published May 21, 2024 · Updated Jun 9, 2024 · Revision 2 · de-DE

Vendor: Veeam Product: Backup Enterprise Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Veeam Backup Enterprise Manager ausnutzen, um Sicherheitsmaßnahmen zu umgehen, seine Berechtigungen zu erweitern oder vertrauliche Informationen offenzulegen.

Product

Veeam Backup Enterprise Manager ist eine optionale webbasierte Management- und Reporting-Konsole für Veeam Backup & Replication.

Vulnerabilities 4

Critical 9.8

CVE-2024-29849 Public exploit EPSS 39%

Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface.

Veeam Backup & Replication

May 22, 2024
High 8.8

CVE-2024-29850

Veeam Backup Enterprise Manager allows account takeover via NTLM relay.

Veeam Backup & Replication

May 22, 2024
High 7.2

CVE-2024-29851

Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account.

Veeam Backup & Replication

May 22, 2024
Low 2.7

CVE-2024-29852

Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs.

Veeam Backup & Replication

May 22, 2024

Revision history

2024-06-09 #2
PoC aufgenommen
2024-05-21 #1
Initiale Fassung

References

Veeam Backup Enterprise Manager Advisory vom 2024-05-21
https://www.veeam.com/kb4581
PoC auf GitHub
https://github.com/sinsinology/CVE-2024-29849