Impact
High
Details
Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability. Dell ImageAssist stores some sensitive encrypted information in the images it creates. A privileged user of a system running an operating system that was deployed with Dell ImageAssist could potentially retrieve this sensitive information to then compromise the system and related systems.
CVSS Base Score: 7.5 (AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Dell ImageAssist versions prior to 8.7.15 contain an information disclosure vulnerability. Dell ImageAssist stores some sensitive encrypted information in the images it creates. A privileged user of a system running an operating system that was deployed with Dell ImageAssist could potentially retrieve this sensitive information to then compromise the system and related systems.
CVSS Base Score: 7.5 (AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.
Affected Products and Remediation
Affected products:
Dell ImageAssist versions prior to 8.7.15
Remediation:
The following Dell ImageAssist release contains a resolution to the vulnerability:
- Dell ImageAssist version 8.7.15
Dell recommends all customers upgrade at the earliest opportunity.
IT administrators who created images with Dell ImageAssist prior to 8.7.15 should change any password included in the created image on the deployed systems.
General Guidance on Account Security:
- IT administrators should enforce OS password change at regular intervals.
- IT administrators should set complex password requirements.
- Users should not use the same passwords on other systems.
- Users should use a password manager to make sure they’re using strong, unique passwords everywhere.
Affected products:
Dell ImageAssist versions prior to 8.7.15
Remediation:
The following Dell ImageAssist release contains a resolution to the vulnerability:
- Dell ImageAssist version 8.7.15
Dell recommends all customers upgrade at the earliest opportunity.
IT administrators who created images with Dell ImageAssist prior to 8.7.15 should change any password included in the created image on the deployed systems.
General Guidance on Account Security:
- IT administrators should enforce OS password change at regular intervals.
- IT administrators should set complex password requirements.
- Users should not use the same passwords on other systems.
- Users should use a password manager to make sure they’re using strong, unique passwords everywhere.
Related Information
Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide