!!SECURTY ISSUE!! opening viclient thru veeam monitor

Real-time performance monitoring and troubleshooting

!!SECURTY ISSUE!! opening viclient thru veeam monitor

Veeam Logoby mwilliamsr » Wed Jul 27, 2011 6:23 pm

Fro those whom are security minded. I have notice a security issue accessing vCenter thru veeam Monitor. Wthin task manager on the monitor server, the Uses Passwords are displayed in clear text, if show comman line is selected (Windows 7/2008).
I will show the image name "VpxClient.exe *32" UserName <user> and Command Line: "-i 1 -s <vCenter host> -p <password>"

This requires fixing.
mwilliamsr
Novice
 
Posts: 3
Liked: never
Joined: Sat Mar 12, 2011 4:41 am
Full Name: Mark Williams

Re: !!SECURTY ISSUE!! opening viclient thru veeam monitor

Veeam Logoby Vitaliy S. » Wed Jul 27, 2011 7:20 pm

Hello Mark,

Thank you for bringing this in to our attention, we'll see what we can do with this.
Vitaliy S.
Veeam Software
 
Posts: 19539
Liked: 1097 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: !!SECURTY ISSUE!! opening viclient thru veeam monitor

Veeam Logoby mwilliamsr » Mon Oct 17, 2011 1:18 pm

Will this Security Issue be addressed in future release(s)? :roll:
mwilliamsr
Novice
 
Posts: 3
Liked: never
Joined: Sat Mar 12, 2011 4:41 am
Full Name: Mark Williams

Re: !!SECURTY ISSUE!! opening viclient thru veeam monitor

Veeam Logoby Vitaliy S. » Mon Oct 17, 2011 1:22 pm

Yes, of course. It will be addressed in Veeam ONE v6.
Vitaliy S.
Veeam Software
 
Posts: 19539
Liked: 1097 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: !!SECURTY ISSUE!! opening viclient thru veeam monitor

Veeam Logoby mwilliamsr » Thu Feb 23, 2012 3:27 pm

When is Veeam ONE v6 release date?
mwilliamsr
Novice
 
Posts: 3
Liked: never
Joined: Sat Mar 12, 2011 4:41 am
Full Name: Mark Williams

Re: !!SECURTY ISSUE!! opening viclient thru veeam monitor

Veeam Logoby Vitaliy S. » Thu Feb 23, 2012 7:00 pm

We are aiming to release it early Q2.
Vitaliy S.
Veeam Software
 
Posts: 19539
Liked: 1097 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov


Return to Monitoring



Who is online

Users browsing this forum: No registered users and 2 guests