hard-coded JWT secret allowing authentication bypass (CVE-2024-29855) #shorts #breaking

CVE

This CVE relates to a hard-coded JWT secret vulnerability in Veeam Recovery Orchestrator, which allows attackers to bypass authentication mechanisms. This issue affects versions prior to 7.0.0.379 and 7.1.0.230 and has been known for only two days. Although it is not a zero-day vulnerability, the specific tools used by potential attackers are not currently known, nor are the identities of those who have been attacked. All users of Veeam Recovery Orchestrator should be aware that their systems might be at risk. Through this vulnerability, hackers can gain unauthorized access by evading the authentication processes.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://www.veeam.com/kb4585