by Kastro
Paper/Archive/CVE-2023-38548

CVE-2023-38548

Veeam One — A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash…

EPSS 12%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 96.1.961 × 2019.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by the Veeam ONE Reporting Service.

Affected

ProductAffectedFixed inSource
One12 – 12–CNA

Scores by source

hackerone (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refveeam.com/kb4508