Commvault 11.36.x < 11.36.123 / 11.40.x < 11.40.72 / 11.44.x < 11.44.20 / 11.46.x < 11.46.20 Missing Authorization (CV_2026_08_8)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(344811);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/11");

  script_cve_id("CVE-2026-77106");
  script_xref(name:"IAVA", value:"2026-A-0979");

  script_name(english:"Commvault 11.36.x < 11.36.123 / 11.40.x < 11.40.72 / 11.44.x < 11.44.20 / 11.46.x < 11.46.20 Missing Authorization (CV_2026_08_8)");

  script_set_attribute(attribute:"synopsis", value:
"The instance of Commvault installed on the remote host is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"The version of Commvault installed on the remote host is 11.36.x prior to 11.36.123, or 11.40.x prior to 11.40.72,
or 11.44.x prior to 11.44.20, or 11.46.x prior to 11.46.20. It is, therefore, affected by a vulnerability as
disclosed in Commvault advisory CV_2026_08_8. Cvlaunchd contained a missing authorization issue affecting command
execution authorization.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  # https://documentation.commvault.com/securityadvisories/CV_2026_08_8.html
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?9b075fd6");
  script_set_attribute(attribute:"solution", value:
"Upgrade to version 11.36.123, 11.40.72, 11.44.20, 11.46.20 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-77106");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/08");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/09/08");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/11");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:commvault:commvault");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("commvault_win_installed.nbin");
  script_require_keys("installed_sw/Commvault");

  exit(0);
}

include('vcf.inc');
include('vcf_extras.inc');

var app_info = vcf::commvault::get_app_info_windows();

var constraints = [
  {'min_version' : '11.0.0.36.0', 'fixed_version': '11.0.0.36.123'},
  {'min_version' : '11.0.0.40.0', 'fixed_version': '11.0.0.40.72'},
  {'min_version' : '11.0.0.44.0', 'fixed_version': '11.0.0.44.20'},
  {'min_version' : '11.0.0.46.0', 'fixed_version': '11.0.0.46.20'}
];

vcf::check_version_and_report(
  app_info:app_info,
  constraints:constraints,
  severity:SECURITY_HOLE,
  strict:FALSE
);