- Description
- Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
- Source
- 050066fd-a2f9-4f32-ab5d-4c53f48bc333
- NVD status
- Analyzed
- Products
- commvault
CVSS 4.0
- Type
- Secondary
- Base score
- 7.7
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- HIGH
CVSS 3.1
- Type
- Primary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-862
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:commvault:commvault:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7D5E9F88-DDA2-4F7E-96C8-63CE8AACF381",
"versionEndExcluding": "11.36.123",
"versionStartIncluding": "11.36.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:commvault:commvault:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F195D789-6414-4A1F-B6B2-E21035032D0A",
"versionEndExcluding": "11.40.72",
"versionStartIncluding": "11.40.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:commvault:commvault:*:*:*:*:*:*:*:*",
"matchCriteriaId": "43942B05-3043-419D-BE53-4BC30CECB734",
"versionEndExcluding": "11.44.20",
"versionStartIncluding": "11.44.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:commvault:commvault:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1D16402F-8EBF-42ED-BC4A-8053736561D4",
"versionEndExcluding": "11.46.20",
"versionStartIncluding": "11.46.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]