CVEvulnerability

CVE-2025-57789

5.3 MEDIUM Published 2025-08-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-08-20
Last modified
2026-06-17
Assigner
050066fd-a2f9-4f32-ab5d-4c53f48bc333
CVSS 4.0 (050066fd-a2f9-4f32-ab5d-4c53f48bc333)
5.3 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-257

Description

During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured.

Affected configurations

• commvault commvault (< 11.36.60)

Related

Weakness · CWE (1)

  • CWE-257 Storing Passwords in a Recoverable Format weakness

References