Veeam Backup & Replication Privileged File Write Vulnerability

A vulnerability in Veeam Backup & Replication version 13.0.1.180 and earlier builds within the 13.x series allows Backup or Tape Operators to write files as the root user. This issue arises from the elevated privileges assigned to these roles, which could be exploited to manipulate files in a way that may compromise system integrity or security.

Impact

Exploitation of this vulnerability could lead to unauthorized file modifications as the root user, potentially allowing for further escalation of privileges or manipulation of critical system files.

Remediation

Users can upgrade to Veeam Backup & Replication version 13.0.1.1071 to address this vulnerability. Instructions for downloading the latest version are available on the Veeam website.