Описание
A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note: The criticality of this vulnerability is reduced because the user with the Read-Only role is only able to view the schedule and cannot make changes.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:veeam:one:11.0.0.1379:*:*:*:*:*:*:*
cpe:2.3:a:veeam:one:11.0.1.1880:*:*:*:*:*:*:*
cpe:2.3:a:veeam:one:12.0.0.2498:*:*:*:*:*:*:*
cpe:2.3:a:veeam:one:12.0.1.2591:*:*:*:*:*:*:*
EPSS
Процентиль: 80%
0.01436
Низкий
4.3 Medium
CVSS3
4.3 Medium
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-922
Связанные уязвимости
CVSS3: 4.3
github
около 2 лет назад
A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note: The criticality of this vulnerability is reduced because the user with the Read-Only role is only able to view the schedule and cannot make changes.
EPSS
Процентиль: 80%
0.01436
Низкий
4.3 Medium
CVSS3
4.3 Medium
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-922