BaseFortify

Executive Summary

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it.

Useful 0 Not Useful 0

Detection Guidance

This CVE does not provide specific detection methods or commands. Check Veeam Agent for Windows logs for unusual file writes or unauthorized file creation in sensitive directories. Review system logs for unexpected changes in file permissions or locations.

Useful 0 Not Useful 0

Impact Analysis

A low-privileged attacker could exploit this to write malicious files to sensitive system locations, potentially leading to privilege escalation or system compromise.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows low-privileged local users to write files to arbitrary locations during agent installation, which could lead to unauthorized data access or manipulation. This may impact compliance with GDPR by risking unauthorized data processing or exposure, and with HIPAA by potentially compromising protected health information integrity or confidentiality.

Useful 0 Not Useful 0

Mitigation Strategies

Update Veeam Agent for Microsoft Windows to the latest version to address the vulnerability. Ensure administrators install the agent with proper permissions to prevent unauthorized file writes.

Useful 0 Not Useful 0