Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Lenovo Installation Packages 1.2.9.3 Clear all filters
TI-2019-04395 CVE-2019-6196 · GHSA-x36v-qf7f-ph37

Untrusted search path in Lenovo Installation Packages

Priority LOW 32

A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and installation.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.0028 Published 2020-06-09 Fixed in 1.2.9.3 CWE-426
TI-2019-04374 CVE-2019-6173 · GHSA-vxgg-fjmf-6j33

Untrusted search path in Lenovo Installation Packages

Priority LOW 29

A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version 1.2.9.3, during installation if an attacker already has administrative privileges.

CVSS 3.1MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00316 Published 2020-06-09 Fixed in 1.2.9.3 CWE-426