Vulnerabilities

TI-2019-04370 CVE-2019-6169 · GHSA-h486-v27r-46fc

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP.

LOW 34

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00763 Published 2019-06-26 Fixed in 4.1.0.1 CWE-311

TI-2019-04369 CVE-2019-6168 · GHSA-9pvr-ccc8-5799

MEDIUM 47

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02475 Published 2019-06-26 Fixed in 4.1.0.1

TI-2019-04368 CVE-2019-6167 · GHSA-4hmq-2484-r7m4

MEDIUM 47

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02475 Published 2019-06-26 Fixed in 4.1.0.1

TI-2019-04367 CVE-2019-6166 · GHSA-fxv3-4v9h-4x8v

LOW 39

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00476 Published 2019-06-26 Fixed in 4.1.0.1 CWE-352