PT-2024-7787 · Veeam · Veeam Backup Enterprise Manager

Published

2024-11-06

·

Updated

2024-11-23

·

CVE-2024-40715

CVSS v3.1

7.7

High

VectorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions Veeam Backup Enterprise Manager (affected versions not specified)
Description A vulnerability in Veeam Backup Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attackers must be able to perform a Man-in-the-Middle (MITM) attack to exploit this vulnerability. The vulnerability is related to improper certificate validation and can be exploited by a remote attacker. This issue poses a significant risk to data integrity.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-294CWE-300

Related Identifiers

BDU:2024-09287
CVE-2024-40715
ZDI-24-1472

Affected Products

Veeam Backup Enterprise Manager