CVE-2023-38548 Information disclosure in One
An unprivileged user can obtain the NTLM hash of the Veeam ONE Reporting Service account, potentially enabling credential-based attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-38548?
CVE-2023-38548 is a critical vulnerability in Veeam One, published on 7 Nov 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by the Veeam ONE Reporting Service.
Weakness: CWE-522
Which versions are affected by CVE-2023-38548?
It affects 1 product.
Products include Veeam One.
How do I fix CVE-2023-38548?
No fix has been published for CVE-2023-38548 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-38548 being exploited?
There is no known exploitation of CVE-2023-38548 in the wild and no public exploit code.
Other vulnerabilities in Veeam One
Sources
Also known as GHSA-5v7j-rmqq-795g.