CVE-2024-29852

—

CVSS 3.0

2.7 low

EPSS

<1%p43

Published

May 22, 2024 (May 22, 2024)

Modified

Jun 17, 2026

Description

Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs.

Vendors: veeam
Products: veeam backup \& replication
Weakness: CWE-280
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news3 stories

Veeam fixes auth bypass flaw in Backup Enterprise Manager (CVE-2024-29849)

Help Net SecurityJun 13, 21:18 UTC · Jun 13, 2024Vulnerability in the wildCVE-2024-29849 CVE-2024-29850 CVE-2024-29851+1 CVEs

60

Critical Veeam Backup Enterprise Manager auth bypass bug

Security AffairsMay 22, 18:01 UTC · May 22, 2024Vulnerability CVE-2024-29849 CVE-2024-29850 CVE-2024-29851+1 CVEs

60

Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass

The Hacker NewsMay 22, 03:53 UTC · May 22, 2024Vulnerability CVE-2024-29849 CVE-2024-29850 CVE-2024-29851+4 CVEs

60