Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-22021

Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope other than the one they are assigned

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hackerone

Description

Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope other than the one they are assigned to.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Veeam Recovery Orchestrator

  • 6 to < 6affected

Veeam Disaster Recovery Orchestrator

  • 5 to < 5affected

Veeam Availability Orchestrator

  • 4 to < 4affected

Veeam Recovery Orchestrator

  • 7 to < 7unaffected

References