{ "schema_version": "1.4.0", "id": "GHSA-hpgw-f4j6-29r5", "modified": "2022-05-24T17:26:07Z", "published": "2022-05-24T17:26:07Z", "aliases": [ "CVE-2020-5385" ], "details": "Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability because of an incomplete fix for CVE-2020-5358. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-5385" }, { "type": "WEB", "url": "https://www.dell.com/support/article/SLN322456" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2020-08-18T21:15:00Z" } }