CVE-2025-8421: CVE-2025-8421: güvenlik açığı

Açıklama (NVD)

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges.

Özet bilgiler

CVSS v3.1

6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

CVSS v4.0

5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%0,11 (yüzdelik 1)

CWE

CWE-276

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• support.lenovo.com
• CWE-276