CVE Vulnerabilities

CVE-2024-40714

Improper Certificate Validation

Published: Sep 07, 2024 | Modified: May 01, 2025
CVSS 3.x
8.3
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive credentials during restore operations.

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

NameVendorStart VersionEnd Version
Veeam_backup_&_replicationVeeam*12.2.0.334 (excluding)

Potential Mitigations

References