HC3 warns of Veeam software vulnerability targeting encrypted credentials

Unauthenticated users can gain access to a network operating Veeam within the backup infrastructure network perimeter and obtain encrypted credentials stored in the configuration database, according to the vendor.

WHY IT MATTERS

After an increasing number of cyberattacks exploiting a Veeam Backup & Replication software vulnerability, tracked as CVE-2023-27532, the Health Sector Cybersecurity Coordination Center recommends that all healthcare organization users keep systems up to date and patch vulnerabilities.

"What makes this threat significant is that in addition to backing …