Description
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user may exploit and gain parallel privilege escalation or access to the database to obtain confidential information.
Problem types
CWE-256: Plaintext Storage of a Password
Product status
Any version before 8.1.1
Credits
Dell would like to thank n3k From TIANGONG Team of Legendsec at QI-ANXIN Group for reporting this issue.
References
www.dell.com/...-cloudlink-multiple-security-vulnerabilities
