Product:
CloudLink
Summary
Dell CloudLink contains a vulnerability that allows a privileged user to exploit the system, leading to parallel privilege escalation or unauthorized access to the database. This can result in the exposure of confidential information. The issue affects versions prior to 8.1.1.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2025-46366 |
Exploitation
To exploit this vulnerability, an attacker with privileged access can manipulate the system to escalate their privileges further or gain unauthorized access to the database. This could involve executing specific commands or scripts that leverage the existing privileges to access sensitive data.
Affected Products
- CloudLink: Affected versions prior to 8.1.1 may allow privileged users to escalate their access and compromise confidential information.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Dell CloudLink. Regularly reviewing user privileges and implementing strict access controls can also help reduce the risk of exploitation.