High · 8.8 CVE-2024-29850 EUVD-2024-26842GHSA-2874-f7gx-365p

Veeam Backup Enterprise Manager allows account takeover via NTLM relay.

Published May 22, 2024 · Updated Sep 19, 2024 · Assigned by hackerone

Vendor: Veeam Product: Backup & Replication

Description

Veeam Backup Enterprise Manager allows account takeover via NTLM relay.

Affected products

Vendor	Product	Affected	Fixed
Veeam	Backup & Replication	12.1.2.172 – < 12.1.2.172	12.1.2.172

Advisories 2

NCSC-2024-0232 Kwetsbaarheden verholpen in Veeam Backup Enterprise Manager NCSC-NL (Netherlands) · Jun 11, 2024
WID-SEC-2024-1204 Veeam Backup Enterprise Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 9, 2024

References

https://veeam.com/kb4581