7.5
Élevée
CVE-2023-27532 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Campagnes de rançongiciel
Utilisation connue
Faiblesse
CWE-306
Description
Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Veeam Backup & Replication | Versions non publiées |