ZeroHour

CVE-2024-40713

CVSS 3.1
7.8 high
EPSS
<1%p24
Published
()
Modified
Description

A vulnerability that allows a user who has been assigned a low-privileged role within Veeam Backup & Replication to alter Multi-Factor Authentication (MFA) settings and bypass MFA.

Vendors
veeam
Products
veeam backup \& replication
Weakness
CWE-287
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news