The vulnerability arises from Dell OpenManage Enterprise incorrectly assigning permissions to a critical resource. An attacker who already has low‑privileged local access can exploit this flaw to bypass protection mechanisms, potentially gaining elevated capabilities within the management console. This flaw maps to CWE‑732 and can result in unauthorized changes to configuration, data, or service availability.

Dell OpenManage Enterprise, versions before 4.8.0. The issue exists in the management console that runs on the Enterprise server and can affect any installation that has not been updated to the 4.8.0 release or later.

The CVSS score of 5.5 indicates a moderate severity, and because the vulnerability requires local low‑privileged access, the exploitability is limited to those with physical or local network access to the OpenManage Enterprise appliance. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. Potential attackers could use this flaw to raise privileges locally, but full remote exploitation or compromise of the underlying operating system is not supported by the current description.