CVE-2019-6196
Published Jun 9, 2020A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and installation.
Vendor/product archive
2 CVEs tagged to lenovo / installation_package — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and installation.
A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version 1.2.9.3, during installation if an attacker already has adm…