PT-2021-5322 · Commvault · Commvault Commcell

Kpc · Published 2021-06-30 · Updated 2022-01-22 · CVE-2021-34997

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Commvault CommCell version 11.22.22

Description This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can be bypassed. The specific flaw exists within the AppStudioUploadHandler class. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this issue to execute code in the context of NETWORK SERVICE.

Recommendations For Commvault CommCell version 11.22.22, consider disabling the AppStudioUploadHandler class as a temporary workaround until a patch is available. Restrict access to the vulnerable class to minimize the risk of exploitation. Avoid using the vulnerable functionality in the affected installations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2021-06150

CVE-2021-34997

ZDI-21-1332

Affected Products

Commvault Commcell

References · 8

• https://bdu.fstec.ru/vul/2021-06150 · Security Note
• https://osv.dev/vulnerability/CVE-2021-34997 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-21-1332 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-34997 · Security Note
• https://t.me/cvenotify/25451 · Telegram Post
• https://zerodayinitiative.com/advisories/ZDI-21-13321 · Note
• https://cybersecurity-help.cz/vdb/SB2021112404 · Note
• https://t.me/cibsecurity/35484 · Telegram Post