Описание
A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on the system with elevated privileges during installation of the package. Previously installed versions are not affected by this issue.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.0.0.2 (исключая)
cpe:2.3:a:lenovo:dolby_vision_provisioning:*:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.0006
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-276
CWE-276
Связанные уязвимости
CVSS3: 5.5
github
больше 1 года назад
A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on the system with elevated privileges during installation of the package. Previously installed versions are not affected by this issue.
EPSS
Процентиль: 19%
0.0006
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-276
CWE-276