CVE-2025-57789 PoC — Commvault 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57789.yaml

Associated Vulnerability

Title:Commvault 安全漏洞 (CVE-2025-57789)
Description:Commvault是美国Commvault公司的一个数据备份、恢复软件。 Commvault 11.36.60之前版本存在安全漏洞，该漏洞源于安装后至首次管理员登录前，可能利用默认凭据获取管理员控制权。

Description

An issue was discovered in Commvault before 11.36.60.During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured.

File Snapshot


 id: CVE-2025-57789

info:
  name: Commvault Initial Administrator Login Process Vulnerability
  auth

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!