Home

Description

A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note: The criticality of this vulnerability is reduced because the user with the Read-Only role is only able to view the schedule and cannot make changes.

PUBLISHED Reserved 2023-08-31 | Published 2023-11-07 | Updated 2024-10-29 | Assigner hackerone




MEDIUM: 4.3CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Product status

Default status
unaffected

11, 11a, 12 (semver)
affected

References

www.veeam.com/kb4508

www.veeam.com/kb4508

cve.org (CVE-2023-41723)

nvd.nist.gov (CVE-2023-41723)

Download JSON