CVE-2023-41723: Medium severity VEEAM ONE vulnerability

Published Nov 7, 2023

Updated

A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note: The criticality of this vulnerability is reduced because the user with the Read-Only role is only able to view the schedule and cannot make changes.

Affected Software

4 affected components

VEEAM ONE=11.0.0.1379

VEEAM ONE=11.0.1.1880

VEEAM ONE=12.0.0.2498

VEEAM ONE=12.0.1.2591

Remediation

Patch Available

https://www.veeam.com/kb4508

Event History

Nov 7, 2023

CVE Published

06:17 AM

Data Sourced

06:17 AM

DescriptionSeverity

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2023-41723.

What is the title of this vulnerability?

The title of this vulnerability is 'A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule'.

What is the severity of CVE-2023-41723?

The severity of CVE-2023-41723 is medium with a severity score of 4.3.

Which software versions are affected by CVE-2023-41723?

The following versions of Veeam ONE are affected by CVE-2023-41723: 11.0.0.1379, 11.0.1.1880, 12.0.0.2498, and 12.0.1.2591.

How can I fix CVE-2023-41723?

To fix CVE-2023-41723, it is recommended to update to the latest version of Veeam ONE.