3 matches found
CVE-2021-34995
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...
CVE-2021-34995
CVE-2021-34995 affects Commvault CommCell 11.22.22 via the DownloadCenterUploadHandler, where unsafely validated user-supplied data allows arbitrary file uploads and, in the NETWORk SERVICE context, code execution. The issue can be exploited with network access and low complexity; CVSS v3.1/3.0 s...
CVE-2021-34995
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...