{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Veeam Backup & Replication: Cloud Connect Missing Authentication for Critical Function (CVE-2023-27532) · updates",
  "home_page_url": "https://pwn.watch/i/veeam-backup-replication-cve-2023-27532",
  "feed_url": "https://pwn.watch/i/veeam-backup-replication-cve-2023-27532/feed.json",
  "description": "Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network perimeter to obtain encrypted credentials stored in the configuration database. This may lead to an attacker gaining access to the backup infrastructure hosts. Added to CISA KEV on 2023-08-22. CISA lists known use in ransomware campaigns.",
  "language": "en",
  "_pwn": {
    "slug": "veeam-backup-replication-cve-2023-27532",
    "severity": "high",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/veeam-backup-replication-cve-2023-27532/feed.xml",
    "llms": "https://pwn.watch/i/veeam-backup-replication-cve-2023-27532/llms.txt",
    "json": "https://pwn.watch/i/veeam-backup-replication-cve-2023-27532.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/veeam-backup-replication-cve-2023-27532#2023-08-22-c65f4e21",
      "url": "https://pwn.watch/i/veeam-backup-replication-cve-2023-27532#2023-08-22-c65f4e21",
      "title": "Veeam Backup & Replication: Cloud Connect Missing Authentication for Critical Function (CVE-2023-27532): CISA added CVE-2023-27532 to the KEV catalog (due 2023-09-12).",
      "content_text": "Veeam Backup & Replication: Cloud Connect Missing Authentication for Critical Function (CVE-2023-27532): CISA added CVE-2023-27532 to the KEV catalog (due 2023-09-12).",
      "date_published": "2023-08-22T00:00:00.000Z",
      "tags": [
        "high"
      ]
    }
  ]
}