What the vulnerability does
01Description
A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and installation.
CVSS base score
6.7/10
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Key dates
02Disclosure timeline
June 9, 2020
CVE published
September 17, 2024
Record updated
External resources
03References
Related vulnerabilities
