1. Home
  2. CVE Database
  3. CVE-2024-45204
MEDIUM · 4.3

CVE-2024-45204

A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved crede...

Vulnerability Description

A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved credentials to expose sensitive NTLM hashes, impacting systems beyond the initial target and potentially leading to broader security vulnerabilities.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
VeeamVeeam Backup \& Replication>= 12.0.0.1402, < 12.3.0.310

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2024-45204?

CVE-2024-45204 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved crede...

How severe is CVE-2024-45204?

CVE-2024-45204 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-45204?

Check the references section above for vendor advisories and patch information. Affected products include: Veeam Veeam Backup \& Replication.