Dell Encryption Improper Link Resolution Vulnerability Leading to Privilege Escalation

A vulnerability allowing improper link resolution before file access has been identified in Dell Encryption versions prior to 11.12.1. This 'link following' vulnerability could be exploited by a local malicious user to elevate privileges. The issue arises during the installation process of affected versions, not in the installed application itself.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Users can upgrade to Dell Encryption version 11.12.1 or later to address this vulnerability. Instructions for downloading the update are available on the Dell Support website.