The vulnerability, registered as CVE-2023-27532, is that encrypted credentials stored in the Veeam Backup & Replication configuration database can be retrieved by an attacker.
This could allow an attacker to gain access to backup infrastructure hosts.
Veeam has already provided an update to close the vulnerability here, we strongly recommend installing the patch in a timely manner.
Additional information can be found here: https://www.veeam.com/kb4424
Read more about latest features in Veeam® Backup & Replication™ v12 and update for switching to PostgreSQL.
Do you have any questions? Feel free to contact us!
