Dell CloudLink (restricted shell breakout): A privileged user breaks out of the restricted shell into a full command

Impact

A privileged user breaks out of the restricted shell into a full command shell on the CloudLink server and escalates. Reachable over the network when SSH is enabled with web credentials.

Who can reach it

SSH to the CloudLink appliance with a known privileged password.

What to do

Upgrade CloudLink past 8.1.2 (fixed in 8.2). Disable SSH on the appliance if you do not operationally need it - that removes the network path entirely.

References