CVE-2018-15766

On install, Dell Encryption versions prior 10.0.1 and Dell Endpoint Security Suite Enterprise versions prior 2.0.1 will overwrite and manually set the "Minimum Password Length" group policy object to a value of 1 on that device. This allows for users to bypass any existing policy for password length and potentially create insecure password on their device. This value is defined during the installation of the "Encryption Management Agent" or "EMAgent" application. There are no other known values modified.

• CWE-521

• https://www.dell.com/support/article/us/en/04/sln313561/dell-encryption-and-dell-endpoint-security-suite-enterprise-security-policy-overwrite-vulnerability?lang=enMitigation, Vendor Advisory
• https://www.dell.com/support/article/us/en/04/sln313561/dell-encryption-and-dell-endpoint-security-suite-enterprise-security-policy-overwrite-vulnerability?lang=enMitigation, Vendor Advisory

Published

Oct 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15760Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-15761Cloud Foundry UAA release, versions prior to v64.0, and UAA,…9.9
• CVE-2018-15762Pivotal Operations Manager, versions 2.0.x prior to 2.0.24, …9
• CVE-2018-15763Pivotal Container Service, versions prior to 1.2.0, contains…9
• CVE-2018-15764Dell EMC ESRS Policy Manager versions 6.8 and prior contain …9.8
• CVE-2018-15765Dell EMC Secure Remote Services, versions prior to 3.32.00.0…3.4
• CVE-2018-15767The Dell OpenManage Network Manager virtual appliance versio…
• CVE-2018-15768Dell OpenManage Network Manager versions prior to 6.5.0 enab…
• CVE-2018-15769RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4…7.5
• CVE-2018-15770Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-15771Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverP…
• CVE-2018-15772Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverP…