← CVE Intelligence

CVE-2023-38549

Veeam / One PUBLISHED

Description (CNA)

A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by the Veeam ONE Reporting Service. Note: The criticality of this vulnerability is reduced as it requires interaction by a user with the Veeam ONE Administrator role.

Affected (CNA)

Vendor / productVersions
Veeam / Oneaffected 11 through 11; affected 11a through 11a; affected 12 through 12

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.