Exploit / PoCcritical

Veeam fixed multiple flaws in Veeam ONE, including critical issues

Security Affairsby @securityaffairsNov 7, 2023 · 11:22 UTC (Nov 7, 2023)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-38547 CVE-2023-38548 CVE-2023-38549 CVE-2023-41723 CVE-2023-27532

Tags: cve-2023-38547 cve-2023-38548 cve-2023-38549 cve-2023-41723 cve-2023-27532 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-27532	Missing Authentication in Veeam Backup & Replication Exposes Stored Credentials	7.5	81%	KEVRansomware	Mar 10, 2023 KEV Aug 22, 2023
CVE-2023-38547 +3 related CVEs CVE-2023-38549 CVE-2023-41723 CVE-2023-38548	A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its configuration…	9.8 group max	19%		Nov 7, 2023

From the original article

2 min read at securityaffairs.com

Veeam addressed multiple vulnerabilities in its Veeam ONE IT infrastructure monitoring and analytics platform, including two critical issues. Veeam addressed four vulnerabilities (CVE-2023-38547, CVE-2023-38548, CVE-2023-38549, CVE-2023-41723) in the Veeam ONE IT infrastructure monitoring and analytics platform. The vulnerability CVE-2023-38547 (CVSS score 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.