Public Exploit Code Can Turn a Local Veeam User Into SYSTEM
The attacker already needs local code execution. The danger is converting a restricted foothold into the account that controls the Windows machine and its backups.
Veeam
Veeam ONE Fixed a CVSS 10 RCE. Another Flaw Can Coerce SMB Authentication
Veeam ONE patches close a CVSS 10 unauthenticated RCE, arbitrary file read, SQL injection and a 9.3 flaw that can coerce SMB authentication.
Veeam warning: “Unable to initialize indexing: mlocate was not found” on Ubuntu Server 22.04
After playing with Veeam 11 for a bit, I decided to get my Linux Docker physical host on the backup schedule. The hardware is getting older (Some would call it vintage or just plain ancient as it’s a 2nd gen…