CVE-2024-22022 in Recovery Orchestrator

الملخص

بحسب MITRE • 07/02/2024

Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to access the NTLM hash of the service account used by the Veeam Orchestrator Server Service.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• مسؤول: HackerOne
• حجز: 04/01/2024
• إفشاء: 07/02/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-253074
• CPE: جاهز
• CWE: CWE-284 (مؤكد)
• CVSS: 8.8 (NVD)
• EPSS: 0.00701
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-22022
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-22022
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-22022/