← CVE Intelligence

CVE-2024-22021

Veeam / Recovery Orchestrator PUBLISHED

Description (CNA)

Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope other than the one they are assigned to.

Affected (CNA)

Vendor / productVersions
Veeam / Recovery Orchestrator affected 6 before 6
Veeam / Disaster Recovery Orchestratoraffected 5 before 5
Veeam / Availability Orchestratoraffected 4 before 4
Veeam / Recovery Orchestratorunaffected 7 before 7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.