CVE-2024-29849: Critical severity veeam backup enterprise manager vulnerability
Published May 22, 2024
·Updated
Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface.
Affected Software
2 affected components
Veeam Backup Enterprise Manager
Veeam Veeam Backup \& Replication<12.1.2.172
Event History
May 21, 2024
News Published
via BleepingComputer·10:24 PM
News Published
via BleepingComputer·10:25 PM
May 22, 2024
CVE Published
via MITRE·10:55 PM
Data Sourced
via MITRE·10:55 PM
DescriptionSeverity
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
May 23, 2024
News Published
via The Register·02:30 PM
News Published
via The Register·02:35 PM
Jun 10, 2024
News Published
via BleepingComputer·03:05 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-29849?
CVE-2024-29849 is a critical severity vulnerability affecting Veeam Backup Enterprise Manager.
2
How do I fix CVE-2024-29849?
To fix CVE-2024-29849, update Veeam Backup Enterprise Manager to the latest patched version released by Veeam.
3
Who is affected by CVE-2024-29849?
Any user of Veeam Backup Enterprise Manager is potentially affected due to the authentication bypass issue.
4
What kind of attack can exploit CVE-2024-29849?
CVE-2024-29849 can be exploited by unauthenticated users who gain unauthorized access to the Enterprise Manager web interface.
5
When was CVE-2024-29849 disclosed?
CVE-2024-29849 was disclosed publicly in May 2024.