CVE-2023-38547

Veeam / One PUBLISHED

Description (CNA)

A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its configuration database. This may lead to remote code execution on the SQL server hosting the Veeam ONE configuration database.

Affected (CNA)

Vendor / product	Versions
Veeam / One	affected 11 through 11; affected 11a through 11a; affected 12 through 12

CWE

No CWE identifiers supplied.

References

https://www.veeam.com/kb4508

ADP enrichment

CVE

No English description supplied.

https://www.veeam.com/kb4508

CISA-ADP

No English description supplied.

No references supplied.