Privilege escalation

2020-08-1821:15:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability because of an incomplete fix for CVE-2020-5358. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link.

CPENameOperatorVersion
encryptionlt10.8
endpoint_security_suite_enterpriselt2.8

CPE	Name	Operator	Version
	encryption	lt	10.8
	endpoint_security_suite_enterprise	lt	2.8

References

www.dell.com/support/article/SLN322456