CVE-2024-42456

Summary

CVE-2024-42456 is a vulnerability affecting Veeam Backup & Replication platform. This issue permits a low-privileged user with a specific role to manipulate critical configuration settings, including modifying the trusted client certificate for authentication on a designated port. The consequence of this vulnerability is unauthorized access, enabling the user to invoke privileged methods and trigger essential services. The cause of the issue lies in insufficient permission requirements on the pertinent method, allowing users with limited privileges to execute actions that should necessitate higher-level authorizations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.