Veeam released the hotfix for the vulnerability in Veeam Backup Enterprise Manager, allowing attackers to bypass the authentication while performing a Man-in-the-Middle (MITM) attack.
The hotfix requires the existing Veeam Backup Enterprise Manager deployment to run 12.2.0.334. You can check which version of Veeam Backup Enterprise Manager is installed by viewing the About section of the Configuration view.
If an earlier version of Veeam Backup Enterprise Manager (12.1.2.172 or older) is deployed, upgrade to 12.2.0.334 using the latest Veeam Backup & Replication ISO, which contains the hotfix and will automatically deploy it.
Please note that a reboot may be required after installing the hotfix.
1.Login to the Veeam Backup Enterprise Manager server.
.Download the Hotfix via the below link. A Veeam portal login is required.
https://www.veeam.com/kb4682?utm_source=feedotter&utm_medium=email&utm_campaign=FO-11-06-2024&utm_content=httpswwwveeamcomkb4682
3.Unzip the download file and run veeam_backup_12.2.0.334_PrivateFix_TF812030.exe
4.Click Yes on the User Account Control page.
5.Click Next on the Welcome page.
6.Click Install on the Ready to Install page.
7.Click Finish on the Private Fix 812030 for Veeam Backup & Replication 12.2.0.334 has been installed successfully page.
I hope you enjoy this post.
Cary Sun
X: @SifuSun
Web Site: carysun.com
Blog Site: checkyourlogs.net
Blog Site: gooddealmart.com
Amazon Author: Amazon.com/author/carysun
About Post Author
Cary Sun has a wealth of knowledge and expertise in data center and deployment solutions. As a Principal Consultant, he likely works closely with clients to help them design, implement, and manage their data center infrastructure and deployment strategies.
With his background in data center solutions, Cary Sun may have experience in server and storage virtualization, network design and optimization, backup and disaster recovery planning, and security and compliance management. He holds CISCO CERTIFIED INTERNETWORK EXPERT (CCIE No.4531) from 1999. Cary is also a Microsoft Most Valuable Professional (MVP), Microsoft Azure MVP, Veeam Vanguard and Cisco Champion. He is a published author with several titles, including blogs on Checkyourlogs.net, and the author of many books.
Cary is a very active blogger at checkyourlogs.net and is permanently available online for questions from the community. His passion for technology is contagious, improving everyone around him at what they do.
Blog site: https://www.checkyourlogs.net
Web site: https://newcarysun-dacvdccdesfnhnfh.canadacentral-01.azurewebsites.net
Blog site: https://gooddealmart.com
Twitter: @SifuSun
in: https://www.linkedin.com/in/sifusun/
Amazon Author: https://Amazon.com/author/carysun