CVE-2023-38548

An unprivileged user accessing Veeam ONE Web Client can steal the NTLM password hash of the service account that runs Veeam ONE Reporting. This allows attackers to potentially crack the password or use it for further attacks.

CWE-522 credential exposure vulnerability in Veeam ONE Web Client enables unauthenticated or low-privilege users to extract NTLM hashes of the Veeam ONE Reporting Service account. The attack vector is network-based with low attack complexity; successful exploitation compromises the confidentiality of service account credentials, enabling offline hash cracking or lateral movement.