Veeam today warned its customers that a recent version of Recovery Orchestrator blocks login to the Web UI after enabling the multi - factor authentication (MFA) mechanism.
See also: Veeam warns of new serious vulnerability in VBR
Veeam Recovery Orchestrator (VRO) is an automated disaster recovery and orchestration solution that helps organizations automate, document, test, and execute recovery plans in the event of disasters such as data loss , site failures, or ransomware attacks .
As the company explained in a statement on Monday, this known issue affects VRO build 7.2.1.286, which was available for download between July 8 and 17, and has now been fixed with the release of version 7.2.1.290. While the new version resolves the MFA lockout issue, customers who have installed the problematic version of VRO are advised to contact technical support for assistance.
See also: Veeam RCE flaw allows servers to be compromised
Veeam is also investigating a known issue that causes connection failures on systems running Windows 11 version 24H2 when restoring from Veeam Recovery Media. While the root cause has not yet been identified, Veeam believes it is most likely due to a change introduced with Windows 11 update KB5051987 in February.
As the company explained in March when it identified this bug, on affected systems Veeam Agent for Windows experiences network connection failures when attempting to restore files from either a Veeam Backup & Replication backup server or an SMB shared folder.
Veeam products are used by more than 550,000 customers worldwide, including 67% of the Global 2,000 companies and 77% of the Fortune 500 companies .
See also: Veeam patches vulnerabilities in Service Provider Console (VSPC)
The fact that the company promptly recognizes issues and proceeds with fixes, while maintaining an open technical support line, demonstrates its commitment to reliability and customer support. However, it also underscores the need for careful testing and evaluation of each new release before deployment in critical production environments
Source: bleepingcomputer
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
