CVE Vulnerabilities

CVE-2024-40714

Improper Certificate Validation

Published: Sep 07, 2024 | Modified: May 01, 2025
CVSS 3.x
8.3
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive credentials during restore operations.

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

Name Vendor Start Version End Version
Veeam_backup_&_replication Veeam * 12.2.0.334 (excluding)

Potential Mitigations

References