CVE-2018-15773 Dell Encryption Enterprise \ Dell Data Protection Encryption Information Disclosure Vulnerability

2018-12-0518:00:00

dell

www.cve.org

AI Score

4.3

Confidence

High

EPSS

Percentile

12.6%

JSON

Dell Encryption (formerly Dell Data Protection | Encryption) v10.1.0 and earlier contain an information disclosure vulnerability. A malicious user with physical access to the machine could potentially exploit this vulnerability to access the unencrypted RegBack folder that contains back-ups of sensitive system files.

CNA Affected

[
  {
    "product": "Dell Encryption (formerly Dell Data Protection | Encryption)",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "10.1.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.dell.com/support/article/us/en/04/sln314963/dell-encryption-enterprise-dell-data-protection-encryption-information-disclosure-vulnerability?lang=en