Upgrade / CVE Question

[pmichelli]

Hello,

I am running VeeamOne 13.0.2.6723 but my Veeam itself is still on the latest 12.x
We have come to understand there is a critical CVE in this build of VeeamOne. Am I safe to upgrade this to 13.1 ? I am planning on upgrading Veeam in the next few weeks to 13.0.2 and then to 13.1 .

Edit : I see there is a patch for 13.0.2 that addresses this. Perhaps I will install this and wait to do the 13.1 until we are ready to touch Veeam. Is this the better option?

https://www.veeam.com/kb4892?utm_source ... mcomkb4892

Thanks,

[vnikiforov]

Hello,

Veeam ONE 13.1 supports monitoring Veeam Backup & Replication 12, so yes, you can safely upgrade it now while the backup server stays on 12.x. Some functionality will only become available once the backup server is also on 13.1. A direct upgrade from 13.0.2 to 13.1 is supported and covers the same vulnerabilities. I suggest to go straight to the latest Veeam ONE 13.1.0.7233 build.

The backup server does not need the intermediate step either: from v12 or later you can upgrade directly to VBR 13.1, skipping 13.0.2 (or recent 13.0.3)