CVE-2024-5474

5.5MEDIUM

Key Information

Vendor
Lenovo
Status
Dolby Vision Provisioning Software
Vendor
CVE Published:
11 October 2024

Summary

A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on the system with elevated privileges during installation of the package. Previously installed versions are not affected by this issue.

Affected Version(s)

Dolby Vision Provisioning software < 2.0.0.2

References

https://support.lenovo.com/us/en/product_security/LEN-158394

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database

Credit

Lenovo thanks Alaa Kachouh for reporting this issue.
.