CVE-2024-29851

—

CVSS 3.0

7.2 high

EPSS

<1%p58

Published

May 22, 2024 (May 22, 2024)

Modified

Jun 17, 2026

Description

Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account.

Vendors: veeam
Products: veeam backup \& replication
Weakness: CWE-294
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news3 stories

Veeam fixes auth bypass flaw in Backup Enterprise Manager (CVE-2024-29849)

Help Net SecurityJun 13, 21:18 UTC · Jun 13, 2024Vulnerability in the wildCVE-2024-29849 CVE-2024-29850 CVE-2024-29851+1 CVEs

60

Critical Veeam Backup Enterprise Manager auth bypass bug

Security AffairsMay 22, 18:01 UTC · May 22, 2024Vulnerability CVE-2024-29849 CVE-2024-29850 CVE-2024-29851+1 CVEs

60

Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass

The Hacker NewsMay 22, 03:53 UTC · May 22, 2024Vulnerability CVE-2024-29849 CVE-2024-29850 CVE-2024-29851+4 CVEs

60