CVE-2015-2234

Description

References

• securitytracker.com/id/1032268
• support.lenovo.com/us/en/product_security/lsu_privilege · Vendor Advisory
• ioactive.com/pdfs/Lenovo_System_Update_Multiple_Privilege_Escalations.pdf
• securityfocus.com/bid/74634

system update의 다른 취약점

• CVE-2023-4632높음 7.8An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute cod…
• CVE-2022-4568높음 7.0A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.
• CVE-2022-0354높음 7.8A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute cod…
• CVE-2020-8342높음 7.0A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalation of privilege.
• CVE-2015-7336높음 7.5MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported (fixed and publicly disclos…