« Volver al listado

CVE-2024-29855

Estado: AnalizadaCrítica (9)—

Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Veeam — Recovery Orchestrator

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-29855",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-29855",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-06-11T13:18:37.680576Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "support@hackerone.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 9,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "support@hackerone.com",
      "affectedData": [
        {
          "vendor": "Veeam",
          "product": "Recovery Orchestrator",
          "versions": [
            {
              "status": "affected",
              "version": "7.1.0.230",
              "lessThan": "7.1.0.230",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "7.0.0.379",
              "lessThan": "7.0.0.379",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:veeam:recovery_orchestrator:*:*:*:*:*:*:*:*"
          ],
          "vendor": "veeam",
          "product": "recovery_orchestrator",
          "versions": [
            {
              "status": "affected",
              "version": "7.1.0.230"
            },
            {
              "status": "affected",
              "version": "7.0.0.379"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-06-11T04:15:12.953",
  "references": [
    {
      "url": "https://www.veeam.com/kb4585",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "support@hackerone.com"
    },
    {
      "url": "https://www.veeam.com/kb4585",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-798"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator"
    },
    {
      "lang": "es",
      "value": "El secreto JWT codificado permite omitir la autenticación en Veeam Recovery Orchestrator"
    }
  ],
  "lastModified": "2026-06-17T07:23:14.660",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:veeam:recovery_orchestrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BD01B30-62BC-44F9-B7A9-A9C643991197",
              "versionEndExcluding": "7.0.0.379"
            },
            {
              "criteria": "cpe:2.3:a:veeam:recovery_orchestrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69B06FAD-A0E1-4106-BDB9-D229118B8151",
              "versionEndExcluding": "7.1.0.230",
              "versionStartIncluding": "7.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "support@hackerone.com"
}