CVE-2024-40718

Veeam / Nutanix AHV PUBLISHED

Description (CNA)

A server side request forgery vulnerability allows a low-privileged user to perform local privilege escalation through exploiting an SSRF vulnerability.

Affected (CNA)

Vendor / product	Versions
Veeam / Nutanix AHV	affected 12.6.0 before 12.6.0
Veeam / Nutanix KVM	affected 12.5.0 before 12.5.0

CWE

No CWE identifiers supplied.

References

https://www.veeam.com/kb4649

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.