Lenovo Solution Center Elevation of Privilege Vulnerability

Lenovo Solution Center is a set of computer system monitoring software from the Chinese company Lenovo Lenovo. The software is capable of identifying the status of system operation, network connectivity, and overall system security, among other things. An elevation vulnerability exists in Lenovo...

Lenovo Solution Center Path Traversal Vulnerability

Lenovo Solution Center is a set of computer system monitoring software from the Chinese company Lenovo Lenovo. The software is capable of recognizing the status of system operation, network connectivity, and overall system security, among other things. A path traversal vulnerability exists in...

Lenovo Solution Center Cross-Site Request Forgery Vulnerability

Lenovo Solution Center is a set of computer system monitoring software from the Chinese company Lenovo Lenovo. The software is capable of recognizing the status of system operation, network connectivity, and overall system security, among other things. A cross-site request forgery vulnerability...

CVE-2015-8535

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A directory traversal vulnerability was discovered fixed and publicly disclosed in 2015 in Lenovo Solution Center LSC prior to version 3.3.002 that could allow a user to execute arbitrary code with elevated...

CVE-2015-8536

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was discovered fixed and publicly disclosed in 2015 in Lenovo Solution Center LSC prior to version 3.3.002 that could allow cross-site request forgery...

CVE-2015-8534

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was discovered fixed and publicly disclosed in 2015 in Lenovo Solution Center LSC prior to version 3.3.002 that could allow a user to execute arbitrary code with elevated...

Cross site request forgery (csrf)

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was discovered fixed and publicly disclosed in 2015 in Lenovo Solution Center LSC prior to version 3.3.002 that could allow cross-site request forgery...

Privilege escalation

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was discovered fixed and publicly disclosed in 2015 in Lenovo Solution Center LSC prior to version 3.3.002 that could allow a user to execute arbitrary code with elevated...

Directory traversal

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A directory traversal vulnerability was discovered fixed and publicly disclosed in 2015 in Lenovo Solution Center LSC prior to version 3.3.002 that could allow a user to execute arbitrary code with elevated...

CVE-2015-8535

Summary of CVE-2015-8535: A directory traversal vulnerability in Lenovo Solution Center (LSC) prior to version 3.3.002 allows an attacker to execute arbitrary code with elevated privileges. Affected product: Lenovo Solution Center. Root cause: directory traversal enabling code execution via manip...

CVE-2015-8536

The connected CNVD entry for Lenovo Solution Center CSRF (CVE-2015-8536) confirms a cross-site request forgery vulnerability in Lenovo Solution Center versions before 3.3.002. Attackers could perform unauthorized operations via a malicious site or crafted URL, impacting integrity/availability of ...

CVE-2015-8534

This CVE (CVE-2015-8534) concerns Lenovo Solution Center (LSC). A local privilege escalation was fixed and publicly disclosed in 2015 for LSC versions prior to 3.3.002, enabling an unprivileged user to execute arbitrary code with elevated privileges. The issue is documented across multiple source...

CVE-2015-8535

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A directory traversal vulnerability was discovered fixed and publicly disclosed in 2015 in Lenovo Solution Center LSC prior to version 3.3.002 that could allow a user to execute arbitrary code with elevated...

CVE-2015-8534

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was discovered fixed and publicly disclosed in 2015 in Lenovo Solution Center LSC prior to version 3.3.002 that could allow a user to execute arbitrary code with elevated...

CVE-2015-8536

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was discovered fixed and publicly disclosed in 2015 in Lenovo Solution Center LSC prior to version 3.3.002 that could allow cross-site request forgery...

Lenovo Solution Center Privilege Vulnerability

Lenovo Solution Center LSC is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. An elevation of privilege vulnerability exists in Lenovo Solution Center version 03.12.003, which can b...

CVE-2019-6177

A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege escalation. Lenovo ended support for Lenovo Solution Center and recommended that customers migrate to...

CVE-2019-6177

A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege escalation. Lenovo ended support for Lenovo Solution Center and recommended that customers migrate to...

CVE-2019-6177

CVE-2019-6177 affects Lenovo Solution Center version 03.12.003. A high-privilege Lenovo process overwrites the DACL of files in the C:\ProgramData\Lenovo\LSC\log\ directory, enabling a low-privileged user to create a hardlink to a target file and later have permissions elevated to write/modify th...

CVE-2019-6177

A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege escalation. Lenovo ended support for Lenovo Solution Center and recommended that customers migrate to...