Update Now or Pay Later: Critical Veeam Security Flaws Put Data at Risk
Update Veeam Backup Enterprise Manager to thwart hackers exploiting a critical security flaw tracked as CVE-2024-29849. This vulnerability lets attackers log in as any user. Other issues include account takeovers and log access. Version 12.1.2.172 fixes all flaws. Don’t risk it—patch now!
Hot Take:
Veeam users, it’s time to patch up those gaps before the cyber bandits waltz in like they own the place! Your backups shouldn’t be the ones needing a backup plan.
Key Points:
- Critical flaw CVE-2024-29849 could let attackers bypass authentication and waltz into Veeam Backup Enterprise Manager.
- Additional vulnerabilities include account takeover via NTLM relay, NTLM hash theft, and backup session log access.
- All issues are resolved in version 12.1.2.172, so update ASAP.
- Recent fixes also addressed a local privilege escalation flaw and a remote code execution bug.
- Past exploits by threat groups like FIN7 and Cuba underline the urgency of these updates.
Already a member? Log in here