Commvault Web Server Unspecified Vulnerability Allowing Webshell Execution

A vulnerability has been identified in Commvault Web Server that allows remote, authenticated attackers to create and execute webshells. This issue affects several versions of Commvault software on both Windows and Linux platforms. The vulnerability was introduced in a zero-day exploit and has been linked to recent cyber threat activity targeting Commvault's SaaS cloud application, Metallic, according to CISA.

Impact

Exploitation of this vulnerability could lead to unauthorized webshells being executed on the affected web server, potentially allowing for further exploitation of the server or the environment.

Remediation

Users are advised to update to Commvault versions 11.36.46, 11.32.89, 11.28.141, or 11.20.217. For Commvault SaaS customers, no action is required as patches are automatically deployed. On-premises customers should apply the latest updates and follow best practices for securing Commvault applications.