Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Commvault 11.20.0 - 11.36.0 Windows Maintenance Installer DLL Injection
Vulnerability Description
A DLL injection vulnerability exists in Commvault for Windows 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0. During the installation of maintenance updates, an attacker with local access may exploit uncontrolled search path or DLL loading behavior to execute arbitrary code with elevated privileges. The vulnerability has been resolved in versions 11.20.202, 11.28.124, 11.32.65, 11.34.37, and 11.36.15.
CVSS Information
N/A
Vulnerability Type
对搜索路径元素未加控制
Vulnerability Title
Commvault for Windows 安全漏洞
Vulnerability Description
Commvault for Windows是美国Commvault公司的一个数据备份、恢复软件。 Commvault for Windows存在安全漏洞，该漏洞源于DLL注入，可能导致任意代码执行。以下版本受到影响：11.20.0版本、11.28.0版本、11.32.0版本、11.34.0版本和11.36.0版本。
CVSS Information
N/A
Vulnerability Type
N/A