Dell Encryption Improper Link Resolution Vulnerability Allowing Information Tampering

A vulnerability exists in Dell Encryption versions prior to 11.12.1, related to improper link resolution before file access, commonly referred to as 'link following'. This vulnerability allows a low-privileged attacker with local access to potentially manipulate information. The issue arises during the installation process of versions earlier than 11.12.1, not in the installed application itself.

Impact

Exploitation of this vulnerability could lead to unauthorized information tampering.

Remediation

Users can upgrade to Dell Encryption version 11.12.1 or later to address this vulnerability. Instructions for downloading the update are available on the Dell Support website.