A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.
Veeam ONE Schwachstellen (CVE)
Für Veeam ONE veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.
A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.
A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.
A vulnerability allowing local privilege escalation to the Reporter service context.
A vulnerability allowing remote unauthenticated code execution on the agent host.
A vulnerability allowing a low-privileged user to inject SQL and extract database contents.
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.
A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally.
A vulnerability allowing a high-privileged user to execute arbitrary code on the server.