CloudLink vulnerabilities
8 known vulnerabilities in CloudLink from Dell. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
CloudLin: Improper Privilege Management
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system.
- 8.4 High severity
CloudLink: Improper Neutralization of Special Elements used in an OS Command
Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system.
- 9.1 Critical severity
CloudLink: Improper Neutralization of Special Elements used in an OS Command
Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. I
- 7.2 High severity
CloudLink: Improper Neutralization of Special Elements used in an OS Command
Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system.
- 7.2 High severity
CloudLink: Improper Check or Handling of Exceptional Conditions
CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component. A highly privileged malicious user with remote access could potentially exploit this vulnerability, leading to execute unauth
- 7.5 High severity
CloudLink: Use of a Broken or Risky Cryptographic Algorithm
CloudLink 7.1.2 and all prior versions contain a broken or risky cryptographic algorithm vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability leading to some information disclosure.
- 8.2 High severity
CloudLink: Improper Authentication
Dell CloudLink 7.1.3 and all earlier versions contain an Authentication Bypass Using an Alternate Path or Channel Vulnerability. A high privileged local attacker may potentially exploit this vulnerability leading to authentication bypass and access the CloudLi
- 9.8 Critical severity
CloudLink: Improper Authentication
Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system.