Safety of storage CIFS PASSWD

[zwe12]

How safe is veeam agent for windows keeping the CIFS password? Can an attacker use it to encrypt archives?
Why this product cannot simply pull data from a remote location? ( so that, on the part of the backup machine, there is no access to the backup catalog in principle.)

BR,
Vladimir

[Dima P.]

Hello and welcome to the community Vladimir!

How safe is veeam agent for windows keeping the CIFS password? Can an attacker use it to encrypt archives?

Password is encrypted in the agent database.

Why this product cannot simply pull data from a remote location? ( so that, on the part of the backup machine, there is no access to the backup catalog in principle.)

You can configure access to the file share with machine account (which does not have any password at all). In order to do that, you need to configure the access permissions for the machine account on the file share. In the job settings you need to uncheck the box 'this shared folder requires permissions' to let agent use machine account for authentication.