{"id":916,"date":"2025-04-23T05:58:35","date_gmt":"2025-04-23T05:58:35","guid":{"rendered":"http:\/\/localhost\/?p=916"},"modified":"2025-04-23T05:58:35","modified_gmt":"2025-04-23T05:58:35","slug":"cve-2025-34028-commvault-command-center-innovation-release-unathenticated-path-traversal","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=916","title":{"rendered":"CVE-2025-34028 Commvault Command Center Innovation Release Unathenticated Path Traversal"},"content":{"rendered":"
\n

Vulnerability Details<\/h2>\n
\n

Basic Information<\/h3>\n\n\n\n\n\n\n
Title<\/th>\nCVE-2025-34028 Commvault Command Center Innovation Release Unathenticated Path Traversal<\/td>\n<\/tr>\n
Type<\/th>\nvulnrichment<\/td>\n<\/tr>\n
Published<\/th>\n2025-04-22T16:32:23<\/td>\n<\/tr>\n
Last Seen<\/th>\n2025-04-22T18:25:14<\/td>\n<\/tr>\n
CVSS Score<\/th>\n10.0 (CRITICAL)<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

CVSS v3 Details<\/h3>\n\n\n\n\n\n\n\n\n\n
Attack Vector<\/th>\nNETWORK<\/td>\n<\/tr>\n
Attack Complexity<\/th>\nLOW<\/td>\n<\/tr>\n
Privileges Required<\/th>\nNONE<\/td>\n<\/tr>\n
User Interaction<\/th>\nNONE<\/td>\n<\/tr>\n
Scope<\/th>\nCHANGED<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\nLOW<\/td>\n<\/tr>\n
Integrity Impact<\/th>\nHIGH<\/td>\n<\/tr>\n
Availability Impact<\/th>\nHIGH<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

CVE Information<\/h3>\n\n\n\n\n
CVE IDs<\/th>\nCVE-2025-34028<\/td>\n<\/tr>\n
CWE<\/th>\nCWE-22<\/td>\n<\/tr>\n
Bulletin Family<\/th>\ncve<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

Description<\/h3>\n
\n A path traversal vulnerability in Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files, which, when expanded by the target server, result in Remote Code Execution. This issue affects Command Center…\n <\/div>\n<\/p><\/div>\n
\n

Impact Assessment<\/h3>\n\n\n\n
Base Score<\/th>\n10.0<\/td>\n<\/tr>\n
Severity<\/th>\nCRITICAL<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

View full CVE details<\/a><\/p>\n<\/p><\/div>\n<\/div>\n