Skip to content
OpenAdvisories
High · 7.3 CVE-2020-5343 EUVD-2020-26525GHSA-h6cx-vr2q-r4vv

Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecure inherited permis…

Published May 4, 2020 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecure inherited permissions vulnerability. A local authenticated malicious user with low privileges could exploit this vulnerability to gain unauthorized access on the root folder.

Affected products

VendorProductAffectedFixed
Dell CPG SW unspecified – < Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019 Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019

References