CVE-2022-3611 HIGH

CVE-2022-3611

Vendor Lenovo

Product App Store

Weakness CWE-200 · Info exposure

Published October 27, 2023

Last update September 9, 2024

View on NVD All CVEs

CVSS base score

7.6/10

Attack vector Adjacent

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications.

Key dates

02Disclosure timeline

October 27, 2023 CVE published

September 9, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-3611 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/200.html

Related vulnerabilities

04Related CVE

CVE-2024-50342 Internal address and port enumeration allowed by NoPrivateNetworkHttpClient in symfony/http-client CVE-2023-46115 Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli CVE-2024-47080 matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver CVE-2023-34236 Information Disclosure Vulnerability in Weave GitOps Terraform Controller CVE-2025-61780 Rack has Possible Information Disclosure Vulnerability