File Access Vulnerability in Lenovo Vantage Software by Lenovo
CVE-2020-8316

4.4MEDIUM

Key Information:

Vendor
Lenovo
Status
Vantage
Vendor
CVE Published:
14 April 2020

Summary

A security vulnerability in Lenovo Vantage prior to version 10.2003.10.0 allows authenticated users to read sensitive files on the system with elevated privileges. This breach can expose critical information and compromises system integrity, emphasizing the need for users to update to the latest version to mitigate potential risks.

Affected Version(s)

Vantage < 10.2003.10.0

References

https://support.lenovo.com/us/en/product_security/LEN-30401
x_refsource_MISC

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks T Shiomitsu for reporting this issue.
.