CVE-2023-27532 — Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Fun

描述

Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network perimeter to obtain encrypted credentials stored in the configuration database. This may lead to an attacker gaining access to the backup infrastructure hosts.

如何修補 CVE-2023-27532

OSV 沒有提供套件對應 — 請參考下方連結尋找廠商提供的建議。

CVE-2023-27532 正在被利用嗎?

是 — CVE-2023-27532 已列入 CISA Known Exploited Vulnerabilities (KEV) 清單,代表正在被實際利用,請立即修補。

受影響套件(0)

OSV 沒有提供套件對應。