Dell PowerProtect Agent Service Incorrect Permission Assignment Vulnerability Allowing Information Exposure

A vulnerability exists in Dell PowerProtect Agent Service versions prior to 20.1, due to incorrect permission assignments for critical resources. This flaw could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized information exposure.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information.

Remediation

Users can upgrade to Dell PowerProtect Agent Service version 20.1.0.0 or later to address this vulnerability.