Description (CNA)
A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input validation. Successful exploitation results in a valid user session for a low privilege role.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Commvault / CommCell | affected 11.32.0 through 11.32.101; affected 11.36.0 through 11.36.59 |
CWE
CWE-88
References
ADP enrichment
No English description supplied.
No references supplied.