Product:
Dell Encryption
Summary
Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information tampering. This could allow unauthorized modifications to files.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.6 | CVE-2025-46636 |
Exploitation
To exploit this vulnerability, an attacker with local access would need to leverage their low privileges to manipulate file links. By following improper links, the attacker could gain access to sensitive information or alter files without proper authorization. This requires user interaction to trigger the exploitation process.
Affected Products
- Dell Encryption: Versions prior to 11.12.1 are affected by the vulnerability, allowing for potential information tampering.
Mitigation
To mitigate this vulnerability, users should upgrade to Dell Encryption version 11.12.1 or later. Regularly updating software and monitoring for security patches can help protect against similar vulnerabilities in the future.