Comprehensive data protection for all workloads
Post Reply
mcz
Veeam Legend
Posts: 945
Liked: 221 times
Joined: Jul 19, 2016 8:39 am
Full Name: Michael
Location: Rheintal, Austria
Contact:

little 'data breach' when Vss fails

Post by mcz » 1 person likes this post

Hi everyone,

just received a warning about a failed vss call during backup time today with the following content:
Failed to perform post-backup application-aware processing steps Details: Failed to call RPC function 'Vss.FinishSnapshot': Error code: 0x80004005. Failed to invoke func [FinishSnapshot]: Unbekannter Fehler. Could not run program [C:\WINDOWS\TEMP\{9c63168b-4aa0-46f9-8069-a58acd122666}] with arguments [-func BlobCall -out "C:\WINDOWS\TEMP\{13f0d008-af5a-4800-b4ce-93cf8b69e43c}" -blob "C:\WINDOWS\TEMP\{2aad1051-0426-4c93-a35b-e14313843132}" -glogin "domain\user" -gpwd xyz
If you take a look at the last part, the "xyz" from the gpwd argument should probably not be shown here?? I'm not sure about it but if it was a Hash or anything that can be used to authenticate this user, it should not be shown in this message. If this value was already 'anonymized', then there's no reason to stop smiling ;)

Thanks!
Egor Yakovlev
Product Manager
Posts: 2580
Liked: 708 times
Joined: Jun 14, 2013 9:30 am
Full Name: Egor Yakovlev
Location: Prague, Czech Republic
Contact:

Re: little 'data breach' when Vss fails

Post by Egor Yakovlev »

Hi Michael,

Will be glad to investigate this one with QA, but we will need an entire log file for this job.
You can send it via PM to me or via support ticket(share ID with me).

/Thanks!
mcz
Veeam Legend
Posts: 945
Liked: 221 times
Joined: Jul 19, 2016 8:39 am
Full Name: Michael
Location: Rheintal, Austria
Contact:

Re: little 'data breach' when Vss fails

Post by mcz »

Hi Egor,

I've sent you a PM. Thanks!
Egor Yakovlev
Product Manager
Posts: 2580
Liked: 708 times
Joined: Jun 14, 2013 9:30 am
Full Name: Egor Yakovlev
Location: Prague, Czech Republic
Contact:

Re: little 'data breach' when Vss fails

Post by Egor Yakovlev »

Thanks.
Investigating.
Egor Yakovlev
Product Manager
Posts: 2580
Liked: 708 times
Joined: Jun 14, 2013 9:30 am
Full Name: Egor Yakovlev
Location: Prague, Czech Republic
Contact:

Re: little 'data breach' when Vss fails

Post by Egor Yakovlev » 2 people like this post

Interesting case: error message string in our log files has password replaced with ***, however UI parses the error message "as is" into the session details.
Password string itself is encrypted, but we will make sure to hide it with *** in the UI as well.
Logged a bug.

/Thanks for reporting!
mcz
Veeam Legend
Posts: 945
Liked: 221 times
Joined: Jul 19, 2016 8:39 am
Full Name: Michael
Location: Rheintal, Austria
Contact:

Re: little 'data breach' when Vss fails

Post by mcz »

Hi Egor,

thanks very much for the quick investigation!
Post Reply

Who is online

Users browsing this forum: Bing [Bot], CoLa, MarkusN, oscarm and 281 guests