ZeroHour

CVE-2023-39246

CVSS 3.1
7.3 high
EPSS
<1%p5
Published
()
Modified
Description

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary folder inside a restricted directory, leading to Privilege Escalation

Vendors
dell
Products
endpoint security suite enterprise, encryption, security management server
Weakness
CWE-61, CWE-59
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.