Dell CloudLink Privileged User Privilege Escalation Vulnerability

A vulnerability has been identified in Dell CloudLink versions 8.0 through 8.1.2, allowing a privileged user with a known password to access the command shell of the CloudLink server. This access could lead to unauthorized privilege escalation and system access. If SSH is enabled with the server's web credentials, the vulnerability could be exploited remotely using the known privileged user and password.

Impact

Exploitation of this vulnerability could result in unauthorized access to the system, allowing for privilege escalation and command execution on the affected server.

Remediation

Users can upgrade to Dell CloudLink version 8.2 or later to address this vulnerability. The update is available through the Dell CloudLink Downloads page.