DSA-2020-113: Dell Encryption and Dell Endpoint Security Suite Improper Access Control Vulnerability
Sammendrag: Dell Encryption and Dell Endpoint Security Suite require an update to address an improper access control vulnerability.
Denne artikkelen gjelder for
Denne artikkelen gjelder ikke for
Denne artikkelen er ikke knyttet til noe bestemt produkt.
Det er ikke produktversjonene som identifiseres i denne artikkelen.
Påvirkning
Medium
Detaljer
- Improper Access Control Vulnerability
CVE-2020-5358
Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability due to incorrect permissions. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link.
CVSS Base Score: 6.7 (AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)
Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability due to incorrect permissions. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link.
CVSS Base Score: 6.7 (AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)
- Improper Access Control Vulnerability
CVE-2020-5358
Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability due to incorrect permissions. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link.
CVSS Base Score: 6.7 (AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)
Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability due to incorrect permissions. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link.
CVSS Base Score: 6.7 (AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)
Berørte produkter og utbedring
Affected Products:
Dell Encryption prior to 10.7
Dell Endpoint Security Suite prior to 2.7
Remediation:
The following Dell Data Security releases contain a resolution to this vulnerability:
- Dell Encryption version 10.7 or later
- Dell Endpoint Security Suite 2.7 or later
Customers should use the latest version from Dell. Dell recommends installing the most current version of Dell Encryption to receive the latest security updates to the product.
Customers can download the latest Dell Encryption software here.
Dell Endpoint Security Suite Enterprise software will be made available to customers on their ddpe.credant.com accounts or can be obtained through Dell ProSupport.
Affected Products:
Dell Encryption prior to 10.7
Dell Endpoint Security Suite prior to 2.7
Remediation:
The following Dell Data Security releases contain a resolution to this vulnerability:
- Dell Encryption version 10.7 or later
- Dell Endpoint Security Suite 2.7 or later
Customers should use the latest version from Dell. Dell recommends installing the most current version of Dell Encryption to receive the latest security updates to the product.
Customers can download the latest Dell Encryption software here.
Dell Endpoint Security Suite Enterprise software will be made available to customers on their ddpe.credant.com accounts or can be obtained through Dell ProSupport.
Bekreftelser
Dell would like to thank Hou JingYi (hjy79425575) of Qihoo 360 CERT for reporting this issue.
Relatert informasjon
Juridisk ansvarsfraskrivelse
Berørte produkter
Security, Dell Encryption, Dell Endpoint Security Suite EnterpriseArtikkelegenskaper
Artikkelnummer: 000131169
Artikkeltype: Dell Security Advisory
Sist endret: 18 aug. 2025
Få svar på spørsmålene dine fra andre Dell-brukere
Støttetjenester
Sjekk om enheten din er dekket av støttetjenestene.