Veeam Backup and Replication: Authentication Bypass by Capture-replay (CVE-2024-29850)

Veeam Backup and Replication: Authentication Bypass by Capture-replay (CVE-2024-29850)

Severity

10

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

05/21/2024

Created

10/26/2024

Added

10/25/2024

Modified

11/07/2024

Description

This Vulnerability in Veeam Backup Enterprise Manager allows account takeover via NTLM relay.

Solution(s)

• veeam-backup-and-replication-upgrade-latest

References

• https://attackerkb.com/topics/cve-2024-29850
• CVE - 2024-29850
• https://veeam.com/kb4581