Description
A code injection vulnerability that allows a low-privileged user with REST API access granted to remotely upload arbitrary files to the VSPC server using REST API, leading to remote code execution on VSPC server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Veeam | Veeam Service Provider Console | 8 – ≤ 8 | — |
Advisories 1
- NCSC-2024-0359 Kwetsbaarheden verholpen in diverse producten van Veeam. NCSC-NL (Netherlands) · Oct 11, 2024