CVE-2024-29851: High severity Veeam Veeam Backup \& Replication vulnerability
Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29851?
CVE-2024-29851 is considered a critical security vulnerability that allows high-privileged users to steal the NTLM hash of the Enterprise Manager service account.
How do I fix CVE-2024-29851?
To address CVE-2024-29851, it is recommended to upgrade Veeam Backup & Replication to version 12.1.2.172 or later.
Who is affected by CVE-2024-29851?
CVE-2024-29851 affects users of Veeam Backup & Replication versions prior to 12.1.2.172.
What kind of data can be compromised due to CVE-2024-29851?
CVE-2024-29851 can lead to the compromise of the NTLM hash of the Enterprise Manager service account, which may allow unauthorized access.
Is there a workaround for CVE-2024-29851?
While an upgrade is the primary recommendation, if an immediate upgrade is not feasible, limiting access to high-privileged accounts can help mitigate risks associated with CVE-2024-29851.