PT-2021-7053 · Commvault · Commvault Commcell

Brandon Perry + 2 · Published 2021-06-30 · Updated 2022-01-22 · CVE-2021-34995

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Commvault CommCell version 11.22.22

Description This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can be bypassed. The specific flaw exists within the DownloadCenterUploadHandler class. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this issue to execute code in the context of NETWORK SERVICE.

Recommendations For Commvault CommCell version 11.22.22, consider disabling the DownloadCenterUploadHandler class until a patch is available to prevent the upload of arbitrary files and mitigate the risk of remote code execution. Restrict access to the DownloadCenterUploadHandler class to minimize the risk of exploitation. Avoid using the vulnerable class until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2022-03109

CVE-2021-34995

ZDI-21-1330

Affected Products

Commvault Commcell

References · 6

• https://zerodayinitiative.com/advisories/ZDI-21-1330 · Security Note
• https://osv.dev/vulnerability/CVE-2021-34995 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-34995 · Security Note
• https://bdu.fstec.ru/vul/2022-03109 · Security Note
• https://t.me/cvenotify/25453 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2021112404 · Note