CVE-2024-29855

Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator

hackerone·CWE-798·Published 2024-06-11

CVSS

—

EPSS

0.22

KEV

Exploits

cve.orgen

81 chars

Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator

NVDen

81 chars

Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator

NVDes

88 chars

El secreto JWT codificado permite omitir la autenticación en Veeam Recovery Orchestrator

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	9.0	—	—	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
3.0	Primary	cve.org	9.0	—	—	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H