All vulnerabilities

Servers and applications

CVE-2024-45204

A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved credentials to expose sensitive NTLM hashes, impacting systems beyond the initial target and potentially leading to broader security vulnerabilities.

Severity
Medium 4.3
Published
4 Dec 2024
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
12.3.0.310
Sources
NVD

Affected software

SoftwareAffected versions
Veeam Backup & ReplicationServers and applications · cpe:a:veeam:veeam_backup_\&_replication
  • From 12.0.0.1402 before 12.3.0.310

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-45204
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-45204