CVE-2024-42022: High severity VEEAM ONE vulnerability
Published Sep 7, 2024
·Updated
An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.
Affected Software
1 affected component
VEEAM ONE>=12.0.0.2498<12.2.0.4093
Event History
Sep 7, 2024
CVE Published
via MITRE·04:11 PM
Data Sourced
via MITRE·04:11 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-42022?
The severity of CVE-2024-42022 is classified as a medium risk due to incorrect permission assignments.
2
How do I fix CVE-2024-42022?
To fix CVE-2024-42022, update Veeam ONE to version 12.2.0.4094 or later.
3
What products are affected by CVE-2024-42022?
CVE-2024-42022 affects Veeam ONE versions 12.0.0.2498 to 12.2.0.4093.
4
What can an attacker do with CVE-2024-42022?
An attacker can modify product configuration files due to incorrect permission assignments in CVE-2024-42022.
5
Is there a workaround for CVE-2024-42022?
A temporary workaround for CVE-2024-42022 involves reviewing and restricting permissions on configuration files until the software is updated.