authentication bypass (CVE-2024-29849) #shorts #breaking

CVE

CVE-2024-29849 involves a serious security flaw known as an authentication bypass. Discovered 1.5 months ago, this vulnerability affects Veeam Backup & Replication versions less than 12.1.2.172 and 11.0.1.1261 P20240304. While this is not a zero-day vulnerability, it has the potential for significant impact. Attackers can exploit this flaw using proof-of-concept exploit code, enabling them to log in as any user on the Veeam Backup Enterprise Manager web interface. Though specific cases of successful attacks have not been disclosed, all users of Veeam Backup Enterprise Manager should take notice.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://veeam.com/kb4581