CVE-2024-45204

published 2024-12-04

CVE-2024-45204: A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The…

Priority P4 20 medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved credentials to expose sensitive NTLM hashes, impacting systems beyond the initial target and potentially leading to broader security vulnerabilities.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
veeam	backup_replication	12.2 – 12.2	—
veeam	veeam_backup_replication	>= 12.0.0.1402 < 12.3.0.310	12.3.0.310

CVSS provenance

nvd v3.1 4.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

nvd v3.0 7.7 HIGH CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-863