1. Home
  2. CVE Database
  3. CVE-2024-42451
MEDIUM · 6.5

CVE-2024-42451

A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by calling a series of methods over an external protocol, ultimat...

Vulnerability Description

A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by calling a series of methods over an external protocol, ultimately retrieving the credentials using a malicious setup on the attacker's side. This exposes sensitive data, which could be used for further attacks, including unauthorized access to systems managed by the platform.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
VeeamVeeam Backup \& Replication>= 12.0.0.1402, < 12.3.0.310

Related Weaknesses (CWE)

CWE-863CWE-312

References

FAQ

What is CVE-2024-42451?

CVE-2024-42451 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by calling a series of methods over an external protocol, ultimat...

How severe is CVE-2024-42451?

CVE-2024-42451 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-42451?

Check the references section above for vendor advisories and patch information. Affected products include: Veeam Veeam Backup \& Replication.