Description
Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access ('Link Following') Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Encryption | NA – < 11.11.0.1 | 11.11.0.1 |
| Dell | Security Management Server | NA – < 11.11.0.2 | 11.11.0.2 |
References
- https://www.dell.com/support/kbdoc/en-us/000347824/dsa-2025-292 vendor-advisory