CVE-2024-26203

[raphael@schitz.net]

Hi, we got warning from security team that Azure Data Studio 1.37.0 installed on our 12.3.1.1139 VBR servers has a flow.
Can we safely upgrade that component or should we wait from Veeam to include a fixed version in the next update?
Thanks

[Mildur]

Hi Raphael,

I couldn't find any reference to "Azure Data Studio" in our internal documentation, and it’s not listed here: https://www.veeam.com/legal/eula-oss.html

Are you sure this application wasn't installed by one of your server administrators to connect to the backup server’s configuration database for troubleshooting purposes?

Best,
Fabian

[raphael@schitz.net]

Thanks a lot Fabian, that's a good question, i'll look into it and let you know.

[raphael@schitz.net]

Hi Fabian, sorry for my late reply.

Indeed it was installed by DBA team and it's now deprecated anyway so we'll get rid of it.

Best Regards