CVE-2020-5358 : Security Advisory and Response

Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability due to incorrect permissions. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link.

Understanding CVE-2020-5358

This CVE involves a privilege escalation vulnerability in Dell Encryption Enterprise and Dell Endpoint Security Suite versions.

What is CVE-2020-5358?

CVE-2020-5358 is a vulnerability in Dell Encryption Enterprise and Dell Endpoint Security Suite versions that allows a local malicious user to escalate privileges through incorrect permissions.

The Impact of CVE-2020-5358

The vulnerability has a CVSS base score of 6.7, indicating a medium severity issue with high impacts on confidentiality, integrity, and availability of the affected systems.

Technical Details of CVE-2020-5358

This section provides more technical insights into the vulnerability.

Vulnerability Description

The vulnerability arises from incorrect permissions in Dell Encryption Enterprise and Dell Endpoint Security Suite versions, enabling a local user to gain elevated privileges.

Affected Systems and Versions

Product: Dell Encryption Enterprise
Vendor: Dell
Versions Affected: < 10.7

Exploitation Mechanism

Attack Complexity: High
Attack Vector: Local
Privileges Required: Low
User Interaction: Required
Scope: Unchanged
Availability Impact: High
Confidentiality Impact: High
Integrity Impact: High

Mitigation and Prevention

To address CVE-2020-5358, follow these mitigation strategies.

Immediate Steps to Take

Update Dell Encryption Enterprise and Dell Endpoint Security Suite to versions 10.7 and 2.7, respectively.
Monitor system logs for any suspicious activities.
Restrict access to critical system resources.

Long-Term Security Practices

Conduct regular security training for users on privilege escalation risks.
Implement the principle of least privilege to limit user access rights.

Patching and Updates

Apply security patches promptly to address known vulnerabilities.