CVE-2024-29855 Hardcoded credentials in Recovery Orchestrator
Attackers can bypass authentication in Veeam Recovery Orchestrator using a hard-coded JWT secret, potentially taking over accounts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-29855?
CVE-2024-29855 is a critical vulnerability in Veeam Recovery Orchestrator, published on 11 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator
Weakness: CWE-798
Which versions are affected by CVE-2024-29855?
It affects 1 product.
Products include Veeam Recovery Orchestrator.
How do I fix CVE-2024-29855?
No fix has been published for CVE-2024-29855 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-29855 being exploited?
There is no known exploitation of CVE-2024-29855 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Veeam Recovery Orchestrator
Sources
Also known as GHSA-vfmf-3vr6-j85g.