This vulnerability in Veeam Backup and Replication (version 12.3.2) permits an authenticated domain user to bypass security restrictions and manipulate arbitrary files within a Backup Repository. The issue is classified under CWE-693, which relates to protection mechanism failures. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges, no user interaction, and impacts confidentiality, integrity, and availability at a high level. No vendor patch or advisory details are currently available, and the product is not a cloud service.

Successful exploitation allows an authenticated domain user to bypass restrictions and manipulate arbitrary files on the Backup Repository, potentially leading to full compromise of backup data confidentiality, integrity, and availability. This could result in data loss, unauthorized data modification, or disruption of backup and recovery operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict domain user access to the Backup Repository to trusted administrators only and monitor for unusual file manipulation activities related to backup storage.