The Switch Configuration Tools Backend (clcmd_server) in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands via shell metacharacters in a cl-rctl command label.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Cumulus_linux |
Cumulusnetworks |
* |
2.5.3 |
References