Lenovo CCSDK CVE-2019-6184 Unspecified Local Privilege Escalation Vulnerability

Description

Lenovo CCSDK is prone to an unspecified local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges.

Technologies Affected

• Lenovo CCSDK

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
To exploit this vulnerability, an attacker requires local interactive access to an affected computer. Grant local access for trusted and accountable users only.

Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].