High · published April 25, 2025
CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 84.5th percentile for exploit probability.
🚨 A remote attacker can exploit an unspecified vulnerability in the Commvault Web Server, turning it into a launching pad for webshells! ⚡ Think of it like a restaurant where the staff unwittingly allow a customer to slip into the kitchen. Once inside, the intruder can whip up whatever they want, wreaking havoc on the entire establishment! An attacker could create and execute malicious scripts on the server, compromising sensitive data and potentially controlling the entire web server. This could lead to devastating consequences for businesses, including data breaches and operational disruptions.
Think of it like a restaurant where the staff unwittingly allow a customer to slip into the kitchen. Once inside, the intruder can whip up whatever they want, wreaking havoc on the entire establishment! This vulnerability allows a remote, authenticated attacker to execute unauthorized commands through webshells, bypassing normal security controls.
An attacker could create and execute malicious scripts on the server, compromising sensitive data and potentially controlling the entire web server. This could lead to devastating consequences for businesses, including data breaches and operational disruptions. To protect your systems, patch to versions 11.36.46, 11.32.89, 11.28.141, or 11.20.217 for both Windows and Linux. Regularly review access controls and monitor for any suspicious activities that could indicate exploitation attempts. You've got this! Follow these steps, and you'll be well on your way to securing your environment! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| commvault/commvault | ≥ 11.20.0, < 11.20.217 | 11.20.217 |
| commvault/commvault | ≥ 11.28.0, < 11.28.141 | 11.28.141 |
| commvault/commvault | ≥ 11.32.0, < 11.32.89 | 11.32.89 |
| commvault/commvault | ≥ 11.36.0, < 11.36.46 | 11.36.46 |