CVE-2024-29852: Low severity Veeam Veeam Backup \& Replication vulnerability
Published May 22, 2024
·Updated
Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs.
Affected Software
1 affected component
Veeam Veeam Backup \& Replication<12.1.2.172
Event History
May 22, 2024
CVE Published
via MITRE·10:55 PM
Data Sourced
via MITRE·10:55 PM
DescriptionSeverity
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
May 23, 2024
News Published
via The Register·02:30 PM
News Published
via The Register·02:35 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-29852?
The severity of CVE-2024-29852 is classified as critical due to the potential exposure of sensitive backup session logs.
2
How does CVE-2024-29852 affect users of Veeam Backup Enterprise Manager?
CVE-2024-29852 allows high-privileged users to access and read backup session logs, which may contain sensitive information.
3
What versions of Veeam Backup & Replication are affected by CVE-2024-29852?
CVE-2024-29852 affects Veeam Backup & Replication versions prior to 12.1.2.172.
4
How do I fix CVE-2024-29852?
To fix CVE-2024-29852, you should upgrade your Veeam Backup & Replication software to version 12.1.2.172 or later.
5
Are there any workarounds for CVE-2024-29852?
Currently, there are no known effective workarounds for CVE-2024-29852; upgrading is recommended.