CVE-2015-5742

Published: Oct 16, 2015Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

VeeamVixProxy in Veeam Backup & Replication (B&R) before 8.0 update 3 stores local administrator credentials in log files with world-readable permissions, which allows local users to obtain sensitive information by reading the files.

Affected (1)

Products: Veeam: Veeam Backup & Replication

Veeam

1 product

Veeam Backup & Replication

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Veeam Veeam Backup & Replication	Up to 8.0.0.2030

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://packetstormsecurity.com/files/133906/Veeam-Backup-And-Replication-6-7-8-Privilege-Escalation.html

Source: cve@mitre.org

Exploit

http://seclists.org/fulldisclosure/2015/Oct/44

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/536647/100/0/threaded

Source: cve@mitre.org

http://www.ush.it/2015/10/08/veeam-backup-replication-6-7-8-local-privilege-escalation-vulnerability/

Source: cve@mitre.org

Exploit

http://www.veeam.com/kb2068

Source: cve@mitre.org

Vendor Advisory

https://www.veeam.com/kb2180

Source: cve@mitre.org

http://packetstormsecurity.com/files/133906/Veeam-Backup-And-Replication-6-7-8-Privilege-Escalation.html