Dell Cloud Disaster Recovery vulnerabilities

Dell Cloud Disaster Recovery versions 20.2 and prior contain an OS Command Injection vulnerability. A high privileged attacker with remote access could exploit this to execute commands.

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Dell Cloud Disaster Recovery, versions prior to 19.20, contains an OS Command Injection vulnerability due to improper neutralization of special elements used in OS commands. A highly privileged attacker with local access could exploit this vulnerability to execute arbitrary commands with root privileges.