9336 matches found
Code injection
In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges...
CVE-2016-8230
In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to Lenovo's servers...
CVE-2016-8231
In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificate...
CVE-2016-8229
A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed...
CVE-2016-8228
In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges...
CVE-2016-8231: Improper Certificate Validation
In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificate...
CVE-2016-8228: Undefined Security Weakness
In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges...
CVE-2016-8229: Cross-Site Request Forgery (CSRF)
A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed...
CVE-2016-8230: Exposure of Sensitive Information to an Unauthorized Actor
In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to Lenovo's servers...
PT-2017-9543
Name of the Vulnerable Software and Affected Versions Lenovo Service Bridge versions prior to 4 Description A user with local privileges on a system could execute code with administrative privileges. Recommendations For versions prior to 4, update to version 4 or later to resolve the issue...
CVE-2016-8231
In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificate...
PT-2017-9546
Name of the Vulnerable Software and Affected Versions Lenovo Service Bridge versions prior to 4 Description A bug was found in the signature verification logic of the code signing certificate in Lenovo Service Bridge, which could be exploited by an attacker to insert a forged code signing...
CVE-2016-8231
In CVE-2016-8231, Lenovo Service Bridge prior to version 4 contains a flaw in the signature verification logic of code signing certificates that could allow a forged certificate to be accepted. Affected product: Lenovo Service Bridge (LSB) on Windows. Root cause: incorrect/weak signature verifica...
CVE-2016-8228
CVE-2016-8228 (Lenovo Service Bridge) affects Lenovo Service Bridge on Windows. Before version 4, a user with local privileges could execute code with administrative privileges, enabling local privilege escalation. Connected sources corroborate a local code execution vulnerability in LSB prior to...
PT-2017-9545
Name of the Vulnerable Software and Affected Versions Lenovo Service Bridge versions prior to 4 Description The issue concerns the use of an insecure HTTP connection by Lenovo Service Bridge to send sensitive system information, including system serial number, machine type and model, and product...
CVE-2016-8229
CVE-2016-8229 refers to a cross-site request forgery in Lenovo Service Bridge (LSB) on Windows, in versions before 4. The vulnerability could be exploited by an attacker who has access to the DHCP server used by the system running LSB. Public details in the connected documents confirm the affecte...
CVE-2016-8230
Lenovo Service Bridge (LSB.exe) on Windows is affected by CVE-2016-8230 due to an insecure HTTP connection used by LSB to transmit system serial number, machine type and model to Lenovo servers on versions prior to 4. The root cause is unencrypted data transmission. Impact described in sources in...
PT-2017-9544
Name of the Vulnerable Software and Affected Versions Lenovo Service Bridge versions prior to 4 Description A cross-site request forgery issue exists that could be exploited by an attacker with access to the DHCP server used by the system where the software is installed. Recommendations For...