CVE-2023-39246CWE-61
Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows…
Medium · published November 16, 2023
What it is
Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary folder inside a restricted directory, leading to Privilege Escalation
The record
Technical detail
- CVSS v3.1
- 4.6 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00152 · 4.0th percentile
- Weakness
- CWE-61 · UNIX Symbolic Link (Symlink) Following
- Published
- 2023-11-16T08:41Z
EPSS history
Timeline