PT-2024-23085 · Veeam · Veeam Backup Enterprise Manager

Yashar Shahinzadeh · Published 2024-05-21 · Updated 2025-10-11 · CVE-2024-29852

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Veeam Backup Enterprise Manager (affected versions not specified)

Description The issue allows high-privileged users to read backup session logs. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-280

Related Identifiers

CVE-2024-29852

Affected Products

Veeam Backup Enterprise Manager

References · 11

• https://osv.dev/vulnerability/CVE-2024-29852 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29852 · Security Note
• https://veeam.com/kb4581 · Vendor Advisory
• https://twitter.com/dips_nk/status/1793003092016824622 · Twitter Post
• https://twitter.com/cyber_edu_jp/status/1800246315563299263 · Twitter Post
• https://t.me/cvenotify/80799 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1793444726336545268 · Twitter Post
• https://t.me/cvenotify/127618 · Telegram Post
• https://t.me/zerodayalert/237 · Telegram Post
• https://t.me/CyberSecurityTechnologies/12447 · Telegram Post
• https://twitter.com/ksg93rd/status/1977042222865649739 · Twitter Post