ZDI-21-1330: Commvault CommCell DownloadCenterUploadHandler Arbitrary File Upload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the DownloadCenterUploadHandler class. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-21-1330?
ZDI-21-1330 is classified as a critical severity vulnerability due to its potential for remote code execution.
How do I fix ZDI-21-1330?
To address ZDI-21-1330, update Commvault CommCell to the latest version that contains the security patch.
Who can exploit ZDI-21-1330?
ZDI-21-1330 can be exploited by remote attackers who have valid authentication credentials.
What types of systems are affected by ZDI-21-1330?
ZDI-21-1330 affects all installations of Commvault CommCell that are not patched against this vulnerability.
What are the potential impacts of ZDI-21-1330?
Exploitation of ZDI-21-1330 could allow attackers to execute arbitrary code on affected systems, leading to full system compromise.