Low-Privileged User Escalation
CVE-2024-40709

7.8HIGH

Key Information:

Vendor

Veeam
Status
Backup And Recovery
Vendor
CVE Published:
7 September 2024

What is CVE-2024-40709?

A missing authorization flaw in Veeam Backup & Replication software allows a local low-privileged user to escalate their privileges to root level. This vulnerability could enable unauthorized access to sensitive system functions and data, potentially compromising system integrity and security. It is crucial for users of the affected versions to assess the potential risks and apply necessary security measures.

Affected Version(s)

Backup and Recovery 12.1.2

References

https://www.veeam.com/kb4649

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.