Veeam: two criticals in 21 days, and each one spares the branch the other sinks
On 6 October Veeam published KB4934 and the advisory said the 13 branch was not affected. Twenty days later it published KB4948: a 9.1 with no credentials in the CDP Coordinator Service, hitting 13.0 and 13.1 and repeating under each CVE that "Older versions (e.g., 12.x) are not affected". We put both advisories side by side, show why the 9.1 moves faster than the 9.4 despite the number — one needs an account and the other doesn't — and cover what neither tells you: whether that service is listening on your backup server, and from where it can be reached.
Microsoft 365
ES 
CAT 
EN