CVE-2024-42453

A vulnerability Veeam Backup & Replication allows low-privileged users to control and modify configurations on connected virtual infrastructure hosts. This includes the ability to power off virtual machines, delete files in storage, and make configuration changes, potentially leading to Denial of Service (DoS) and data integrity issues. The vulnerability is caused by improper permission checks in methods accessed via management services.

• CWE-862

• https://www.veeam.com/kb4693Vendor Advisory

Published

Dec 4, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-42448From the VSPC management agent machine, under condition that…9.9
• CVE-2024-42449From the VSPC management agent machine, under condition that…7.1
• CVE-2024-4245A vulnerability, which was classified as critical, has been …8.8
• CVE-2024-42450The Versa Director uses PostgreSQL (Postgres) to store opera…10
• CVE-2024-42451A vulnerability in Veeam Backup & Replication allows low-pri…6.5
• CVE-2024-42452A vulnerability in Veeam Backup & Replication allows a low-p…8.8
• CVE-2024-42455A vulnerability in Veeam Backup & Replication allows a low-p…8.1
• CVE-2024-42456A vulnerability in Veeam Backup & Replication platform allow…8.8
• CVE-2024-42457A vulnerability in Veeam Backup & Replication allows users w…6.5
• CVE-2024-42458server.c in Neat VNC (aka neatvnc) before 0.8.1 does not pro…9.8
• CVE-2024-42459In the Elliptic package 6.5.6 for Node.js, EDDSA signature m…5.3
• CVE-2024-4246A vulnerability, which was classified as critical, was found…8.8