Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9g52-r87c-973q

Опубликовано: 04 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating privileges to system-level access. This allows the attacker to upload files to the server with elevated privileges. The vulnerability exists because remote calls bypass permission checks, leading to full system compromise.

A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating privileges to system-level access. This allows the attacker to upload files to the server with elevated privileges. The vulnerability exists because remote calls bypass permission checks, leading to full system compromise.

EPSS

Процентиль: 23%
0.00078
Низкий

8.8 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 8.8
nvd
около 1 года назад

A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating privileges to system-level access. This allows the attacker to upload files to the server with elevated privileges. The vulnerability exists because remote calls bypass permission checks, leading to full system compromise.

EPSS

Процентиль: 23%
0.00078
Низкий

8.8 High

CVSS3

Дефекты

CWE-863