Information disclosure

2020-06-0920:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and installation.

CPENameOperatorVersion
installation_packagelt1.2.9.3

CPE	Name	Operator	Version
	installation_package	lt	1.2.9.3

References

support.lenovo.com/us/en/product_security/len-27431