CVE-2025-57789
During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.3
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 1.15%
- CWE
- CWE-257
- Published
- 2025-08-20
- Last modified
- 2026-03-13
Affected products
- Commvault CommCell
- Commvault CommCell
Weakness type
Related vulnerabilities
- CVE-2026-69297 — Windows DHCP Server Information Disclosure Vulnerability
- CVE-2026-80176 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-65309 — Storage of passwords in a reversible format
- CVE-2026-1836 — Stored credentials in Redmine
- CVE-2026-22574 — A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through...
- CVE-2026-22576 — A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through...
- CVE-2025-8095 — Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge
- CVE-2016-15058 — Hirschmann HiLCOS Classic Platform Password Exposure via SNMP