CVE-2024-42024

概要

参考情報

• veeam.com/kb4649 · Vendor Advisory

one のその他の脆弱性

• CVE-2024-42023高 8.8An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely.
• CVE-2024-42022中 5.3An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.
• CVE-2024-42021中 6.5An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.
• CVE-2024-42020中 5.4A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection.
• CVE-2024-42019高 8.0A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This attack requires user int…