Vulnerabilitycritical

Critical Veeam Backup Enterprise Manager auth bypass bug

Security Affairsby @securityaffairsMay 22, 2024 · 18:01 UTC (May 22, 2024)1 min read2

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-29849 CVE-2024-29850 CVE-2024-29851 CVE-2024-29852

Tags: cve-2024-29849 cve-2024-29850 cve-2024-29851 cve-2024-29852 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-29849 +3 related CVEs CVE-2024-29850 CVE-2024-29851 CVE-2024-29852	Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface	9.8 group max	38%		May 22, 2024

From the original article

1 min read at securityaffairs.com

A critical security vulnerability in Veeam Backup Enterprise Manager could allow threat actors to bypass authentication. A critical vulnerability, tracked as CVE-2024-29849 (CVSS score: 9. 8), in Veeam Backup Enterprise Manager could allow attackers to bypass authentication.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.