Description
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Commvault | Commvault Cloud | 11.46.0 – ≤ 11.46.29, 11.44.0 – ≤ 11.44.24, 11.40.0 – ≤ 11.40.77, 11.36.0 – ≤ 11.36.126 | — |
| Commvault | Grid(HSX) CVFS | 5.0.1.0 – ≤ 5.0.14.4 | — |