Description (CNA)
A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a failure to properly validate TLS certificate.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Veeam / Backup for AWS | affected 7.0 through 7.0 |
| Veeam / Backup for Microsoft Azure | affected 6.0 through 6.0 |
| Veeam / Backup for Google Cloud | affected 5.0 through 5.0 |
| Veeam / Backup for Nutanix AHV | affected 5.1 through 5.1 |
| Veeam / Backup for Oracle Linux Virtualization Manager and Red Hat Virtualization | affected 4.1 through 4.1 |
| Veeam / Backup for Salesforce | affected 3.1 through 3.1 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.