First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-42022

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Veeam	One	>= 12.1, <= 12.1
veeam	one	>= 12, <= 12.1.0.3208

References

https://www.veeam.com/kb4649Vendor Advisory

Timeline

Published: Sep 7, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-420238.8An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely.CVE-2024-420248.8A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on CVE-2024-420257.8A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and ea CVE-2024-420276.7The E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient, allowing attackers to crack it if they hav CVE-2024-420288.8A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (Version 8.4.62 and ea CVE-2024-420296.3xdg-desktop-portal-hyprland (aka an XDG Desktop Portal backend for Hyprland) before 1.3.3 allows OS command execution, e.g., because single CVE-2024-42035.4The Premium Addons Pro for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maps widget in all versions u CVE-2024-420306.2Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may CVE-2024-420317.5Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect servic CVE-2024-420325.5Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-420337.1Access control vulnerability in the security verification module mpact: Successful exploitation of this vulnerability will affect integrity CVE-2024-420345.5LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerability may affect service confidentiality

CVE-2024-42022: Medium severity, CVSS 5.3 | Vulnix