CVE-2020-25780

In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13, Directory Traversal can occur such that an attempt to view a log file can instead view a file outside of the log-files folder.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
VendorProductVersion
commvaultcommcell
𝑥
< 14.68
commvaultcommcell
15.0 ≤
𝑥
< 15.58
commvaultcommcell
16.0 ≤
𝑥
< 16.44
commvaultcommcell
17.0 ≤
𝑥
< 17.29
commvaultcommcell
18.0 ≤
𝑥
< 18.13
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://kb.commvault.com/article/63264
http://kb.commvault.com/article/63264