Low-Privileged User Can Elevate Privileges and Compromise Server

CVE-2024-42452

What is CVE-2024-42452?

A vulnerability exists in Veeam Backup & Replication that enables low-privileged users to remotely initiate agents in server mode and gain system-level access. This exploitation leads to the potential for an attacker to upload files to the server with elevated privileges. The root cause lies in inadequate permission checks during remote calls, which can result in comprehensive system compromise and unauthorized access to sensitive data.

References