Vulnerability in Dell Encryption Enterprise
CVE-2020-5358
Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability due to incorrect permissions. A local malicious user with low privileges could potentially exploit t…
EPSS: 0.002 (8.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Dell Encryption Enterprise — versions unspecified
- Dell Encryption
- Dell Endpoint_security_suite_enterprise
Weakness classification (CWE)
References
- security_alert@emc.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-5358?
- CVE-2020-5358 is a medium-severity vulnerability in Dell Encryption Enterprise, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 6.7/10. Published 2020-06-15.
- How severe is CVE-2020-5358?
- Medium severity. CVSS v3 base score is 6.7 out of 10.