Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-57789

Vulnerability in Initial Administrator Login Process

Description

During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Commvault CommCell

Default version status: unaffected

  • 11.32.0 to ≤ 11.32.101affected
  • 11.36.0 to ≤ 11.36.59affected

References