Description
Dell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.
Problem types
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Product status
Any version before 19.20
Credits
Dell would like to thank zzcentury for reporting this issue.
References
www.dell.com/...ll-cloud-disaster-recovery-rce-vulnerability
