CVE-2024-42019: Infoleak
A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This attack requires user interaction and data collected from Veeam Backup & Replication.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42019?
CVE-2024-42019 is considered a high-severity vulnerability due to its potential to expose sensitive NTLM hashes.
How do I fix CVE-2024-42019?
To remediate CVE-2024-42019, users should upgrade to the latest version of Veeam Backup & Replication that includes the security patches.
Who is affected by CVE-2024-42019?
CVE-2024-42019 primarily affects users of Veeam Backup & Replication services that utilize the Veeam Reporter Service.
What type of attack vector is associated with CVE-2024-42019?
CVE-2024-42019 requires user interaction as an attack vector, making it reliant on phishing or similar tactics.
What is the impact of CVE-2024-42019?
The impact of CVE-2024-42019 includes unauthorized access to passwords and NTLM hashes, potentially leading to further attacks.