CVE-2024-42451 Information disclosure in Backup & Replication
Low-privileged users can leak all saved credentials in plaintext via external protocol calls, exposing sensitive data for further attacks.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-42451?
CVE-2024-42451 is a high-severity vulnerability in Veeam Backup & Replication, published on 4 Dec 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by calling a series of methods over an external protocol, ultimately retrieving the credentials using a malicious setup on the attacker's side. This exposes sensitive data, which could be used for further attacks, including unauthorized access to systems managed by the platform.
Which versions are affected by CVE-2024-42451?
It affects 1 product.
Products include Veeam Veeam Backup \& Replication.
How do I fix CVE-2024-42451?
No fix has been published for CVE-2024-42451 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-42451 being exploited?
There is no known exploitation of CVE-2024-42451 in the wild and no public exploit code.
Other vulnerabilities in Veeam Backup & Replication
- CVE-2024-40711 Veeam Backup and Replication Deserialization
- CVE-2022-26501 Veeam Backup & Replication Remote Code Execution
- CVE-2022-26500 Veeam Backup & Replication Remote Code Execution
- CVE-2023-27532 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function
- CVE-2026-21666 Missing authorization in Backup and Replication
Sources
Also known as GHSA-w345-4xm5-q2xp.