CVE-2015-2234

概要

参考情報

• securitytracker.com/id/1032268
• support.lenovo.com/us/en/product_security/lsu_privilege · Vendor Advisory
• ioactive.com/pdfs/Lenovo_System_Update_Multiple_Privilege_Escalations.pdf
• securityfocus.com/bid/74634

system update のその他の脆弱性

• CVE-2023-4632高 7.8An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute cod…
• CVE-2022-4568高 7.0A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.
• CVE-2022-0354高 7.8A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute cod…
• CVE-2020-8342高 7.0A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege.
• CVE-2015-7336高 7.5MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported (fixed and publicly disclos…