cve.bz

CVE-2024-42451

6.5 mediumEPSS 0.3%

Medium (6.5) in veeam veeam backup \& replication. EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by calling a series of methods over an external protocol, ultimately retrieving the credentials using a malicious setup on the attacker's side. This exposes sensitive data, which could be used for further attacks, including unauthorized access to systems managed by the platform.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWEs
CWE-312, CWE-863
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON