DSA-2020-185: Dell Encryption and Dell Endpoint Security Suite Permissions, Privileges, and Access Controls Vulnerability

Riepilogo: Dell Encryption and Dell Endpoint Security Suite requires an update to address a permissions, privileges, and access controls vulnerability.

Questo articolo si applica a Questo articolo non si applica a Questo articolo non è legato a un prodotto specifico. Non tutte le versioni del prodotto sono identificate in questo articolo.
Scopri le altre risorse

Impatto

Medium

Dettagli

Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability because of an incomplete fix for CVE-2020-5358. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link. 

Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability because of an incomplete fix for CVE-2020-5358. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link. 

Dell Technologies raccomanda a tutti i clienti di prendere in considerazione sia il punteggio base CVSS, sia ogni eventuale punteggio temporale o ambientale che possa avere effetti sul livello di gravità potenziale associato a una specifica vulnerabilità di sicurezza.

Prodotti interessati e correzione

Affected products: 

  • Dell Encryption prior to 10.8
  • Dell Endpoint Security Suite prior to 2.8

Resolution:

The following Dell Data Security releases contains a resolution to this vulnerability:

  • Dell Encryption version 10.8 or later
  • Dell Endpoint Security Suite 2.8 or later

Customers should use the latest version from Dell. Dell recommends installing the latest version of Dell Encryption to receive all of the latest security updates to the product.

Customers can download the latest Dell Encryption software here.

Dell Endpoint Security Suite Enterprise software will be made available to customers on their ddpe.credant.com accounts or can be obtained through Dell ProSupport.

Affected products: 

  • Dell Encryption prior to 10.8
  • Dell Endpoint Security Suite prior to 2.8

Resolution:

The following Dell Data Security releases contains a resolution to this vulnerability:

  • Dell Encryption version 10.8 or later
  • Dell Endpoint Security Suite 2.8 or later

Customers should use the latest version from Dell. Dell recommends installing the latest version of Dell Encryption to receive all of the latest security updates to the product.

Customers can download the latest Dell Encryption software here.

Dell Endpoint Security Suite Enterprise software will be made available to customers on their ddpe.credant.com accounts or can be obtained through Dell ProSupport.

Ringraziamenti

Dell would like to thank Hou JingYi (hjy79425575) of Qihoo 360 CERT for reporting this issue.

Informazioni correlate

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Dichiarazione di non responsabilità

Prodotti interessati

Dell Encryption, Dell Endpoint Security Suite Pro, Dell Endpoint Security Suite Enterprise, Product Security Information
Proprietà dell'articolo
Numero articolo: 000126460
Tipo di articolo: Dell Security Advisory
Ultima modifica: 18 ago 2025
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.