Skip to content
OpenAdvisories
Medium · 6.7 CVE-2020-5358 EUVD-2020-26540GHSA-vppq-r87h-p2cr

Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability …

Published Jun 15, 2020 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability due to incorrect permissions. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link.

Affected products

VendorProductAffectedFixed
Dell Dell Encryption Enterprise unspecified – < 10.7 10.7

References