Race condition in Lenovo System Update (formerly ThinkVantage System Update) prior to 5.06.0034 uses world-writable permissions for the update files directory, which allows local users to gain privileges by writing to an update file after the signature is validated.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
lenovo system update |