Info about vulnerability resolved in VBR build 12.3.2.4854

[iDeNt_5]

Hi all,

I read in the KB https://www.veeam.com/kb4869 the following note: This vulnerability only impacts domain-joined backup servers.

I'm wondering if also in the following scenario the patch could be useful to fix possible Veeam affected components (since I saw, for example, that the Transport Service on all servers/clients connected to the VBR is being updated with this patch):
- VBR NOT domain joined
- Veeam Proxies on Windows domain joined

Thanks.

[iDeNt_5]

No one can answer this question?

[Mildur]

Hi Matteo

I will clarify it.

Best,
Fabian

[iDeNt_5]

Hi Fabian,

Any news?

Thanks.

[iDeNt_5]

I think this could be helpful also for some future updates that would only affect the VBR if it's domain joined, or at least it should be a good hint to add a note if it regards just the VBR or all other Veeam Infrastructure servers, depending on whether they are domain joined or not.

[Mildur]

Hi Matteo

Still working on it.

Our recommendation is to update to v13.0.2 as soon you can, since this type of vulnerability discussed in this topic does not exist anymore in v13 to design changes in our code.

If you can‘t upgrade to v13 yet, make sure to deploy the latest v12.3.2 update.

Best,
Fabian

[iDeNt_5]

Hi Fabian,

Sure, I understand, but there are customers for which isn't possible to upgrade to v13, basically because they have a plenty of unusupported OS where the Guest Interaction is enabled (or the Veeam Agent is installed in).

I look forward for your update.

Thanks.