This vulnerability, identified as CWE-347, involves improper verification of cryptographic signatures in the CommServe component of Commvault Cloud, impacting privilege management. The flaw could potentially allow unauthorized privilege escalation or related security impacts. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no user interaction, and high impacts on confidentiality, integrity, and availability. Affected versions explicitly include 11.36.0, 11.40.0, 11.44.0, and 11.46.0. The vendor advises upgrading to a resolved maintenance release, but no direct patch link or official remediation level is provided in the input data.

The vulnerability impacts privilege management by improper cryptographic signature verification, which could lead to unauthorized privilege escalation or compromise of system integrity and availability. The high CVSS score reflects significant potential impact if exploited. There are no known exploits in the wild at this time.

The vendor recommends upgrading CommServe and Web Server components to a resolved maintenance release to address this issue. Since no explicit patch or remediation level is provided, customers should consult the official vendor advisory for the latest remediation guidance and apply updates accordingly.