Jump to content

NewbyUser

ESET Insiders
  • Posts

    387
  • Joined

  • Last visited

  • Days Won

    7

Kudos

  1. Upvote
    NewbyUser received kudos from Super_Spartan in Dell Security Advisory Update?   
    Yeaa, Hard to say what they actually did lol. Did they update the image itself to apply patches in the image? Iol or did they update the actual restore process itself? That seems unlikely as restoring typically occurs outside windows and is a bit by bit overwrite so I doubt permissions are needed. It's not a very informative update summary, so it's hard to say what they actually changed.  
     
  2. Upvote
    NewbyUser received kudos from Super_Spartan in Dell Security Advisory Update?   
    https://www.dell.com/support/article/en-us/sln321036/dsa-2020-059-dell-os-recovery-image-insecure-inherited-permissions-vulnerability?lang=en
     
    Seems to be addressing this https://www.dell.com/support/article/en-us/sln315190/dell-emc-idrac-multiple-vulnerabilities-cve-2018-15774-and-cve-2018-15776?lang=en
     
    Either they're slow to patch it or it wasn't fully addressed in prior patching
    Or, likely adding the patch to the restore image, so it would be one less thing to have to address should restore be needed.
    Summary:
    Dell Windows 10 recovery images require an update to address an insecure inherited permissions vulnerability.
×
×
  • Create New...