What is CVE-2020-5385?

CVE-2020-5385 is a medium-severity vulnerability in Dell Encryption Enterprise, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 6.7/10. Published 2020-08-18.

How severe is CVE-2020-5385?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Dell Encryption Enterprise

CVE-2020-5385

Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability because of an incomplete fix for CVE-2020-5358. A local malicious user with low privileges could pot…

EPSS: 0.002 (8.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Dell Encryption Enterprise — versions unspecified
Dell Encryption
Dell Endpoint_security_suite_enterprise

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

security_alert@emc.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-5385?: CVE-2020-5385 is a medium-severity vulnerability in Dell Encryption Enterprise, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 6.7/10. Published 2020-08-18.
How severe is CVE-2020-5385?: Medium severity. CVSS v3 base score is 6.7 out of 10.