Vulnerabilities > CVE-2015-8109 - Credentials Management vulnerability in Lenovo System Update 5.07.0013

047910
CVSS 7.0 - HIGH
Attack vector
LOCAL
Attack complexity
HIGH
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
high complexity
lenovo
CWE-255
NVD
Published: 2017-04-24
Updated: 2024-11-21

Summary

Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by making a prediction of tvsu_tmp_xxxxxXXXXX account credentials that requires knowledge of the time that this account was created, aka a "temporary administrator account vulnerability."

Vulnerable Configurations

Part Description Count
Application
Lenovo
1

Common Weakness Enumeration (CWE)

References