DSA-2020-185: Dell Encryption and Dell Endpoint Security Suite Permissions, Privileges, and Access Controls Vulnerability
Summary: Dell Encryption and Dell Endpoint Security Suite requires an update to address a permissions, privileges, and access controls vulnerability.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Medium
Details
Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability because of an incomplete fix for CVE-2020-5358. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link.
Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability because of an incomplete fix for CVE-2020-5358. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link.
Affected Products & Remediation
Affected products:
- Dell Encryption prior to 10.8
- Dell Endpoint Security Suite prior to 2.8
Resolution:
The following Dell Data Security releases contains a resolution to this vulnerability:
- Dell Encryption version 10.8 or later
- Dell Endpoint Security Suite 2.8 or later
Customers should use the latest version from Dell. Dell recommends installing the latest version of Dell Encryption to receive all of the latest security updates to the product.
Customers can download the latest Dell Encryption software here.
Dell Endpoint Security Suite Enterprise software will be made available to customers on their ddpe.credant.com accounts or can be obtained through Dell ProSupport.
Affected products:
- Dell Encryption prior to 10.8
- Dell Endpoint Security Suite prior to 2.8
Resolution:
The following Dell Data Security releases contains a resolution to this vulnerability:
- Dell Encryption version 10.8 or later
- Dell Endpoint Security Suite 2.8 or later
Customers should use the latest version from Dell. Dell recommends installing the latest version of Dell Encryption to receive all of the latest security updates to the product.
Customers can download the latest Dell Encryption software here.
Dell Endpoint Security Suite Enterprise software will be made available to customers on their ddpe.credant.com accounts or can be obtained through Dell ProSupport.
Acknowledgements
Dell would like to thank Hou JingYi (hjy79425575) of Qihoo 360 CERT for reporting this issue.
Related Information
Legal Disclaimer
Affected Products
Dell Encryption, Dell Endpoint Security Suite Pro, Dell Endpoint Security Suite Enterprise, Product Security InformationArticle Properties
Article Number: 000126460
Article Type: Dell Security Advisory
Last Modified: 18 Aug 2025
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.