CVE-2024-42020

Description

References

• veeam.com/kb4649 · Vendor Advisory

More vulnerabilities in one

• CVE-2024-42024HIGH 8.8A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on…
• CVE-2024-42023HIGH 8.8An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely.
• CVE-2024-42022MEDIUM 5.3An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.
• CVE-2024-42021MEDIUM 6.5An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.
• CVE-2024-42019HIGH 8.0A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This attack requires user int…