Radiflow iSAP Smart Collector Restricted Shell Bypass Vulnerability

A vulnerability in Radiflow iSAP Smart Collector running on CentOS 7 - VSAP 1.20 allows users with vpuser credentials to bypass the restrictions of a restricted shell (rbash) accessed via SSH. This flaw enables the user to gain access to a full-featured Linux shell, circumventing the limitations imposed by rbash.

Impact

Exploitation of this vulnerability allows for unauthorized escalation of privileges by gaining access to a full Linux shell, potentially leading to further exploitation of the system.