Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 22/08/2023. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| veeam backup & replication | = 11.0.1.1261= 12.0.0.1420< 11.0.1.1261 | 11.0.1.1261 |
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free