Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w345-4xm5-q2xp

Опубликовано: 04 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by calling a series of methods over an external protocol, ultimately retrieving the credentials using a malicious setup on the attacker's side. This exposes sensitive data, which could be used for further attacks, including unauthorized access to systems managed by the platform.

A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by calling a series of methods over an external protocol, ultimately retrieving the credentials using a malicious setup on the attacker's side. This exposes sensitive data, which could be used for further attacks, including unauthorized access to systems managed by the platform.

EPSS

Процентиль: 26%
0.0009
Низкий

7.7 High

CVSS3

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 6.5
nvd
около 1 года назад

A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by calling a series of methods over an external protocol, ultimately retrieving the credentials using a malicious setup on the attacker's side. This exposes sensitive data, which could be used for further attacks, including unauthorized access to systems managed by the platform.

CVSS3: 7.7
fstec
больше 1 года назад

Уязвимость средства защиты облачных, виртуальных и физических систем Veeam Backup & Replication, связанная с хранением конфиденциальной информации в открытом виде, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 26%
0.0009
Низкий

7.7 High

CVSS3

Дефекты

CWE-312