Skip to content
Sign in
6.7 Medium

CVE-2019-6196 A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged…

Description

A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and installation.

Affected products and versions

Product Affected versions Fixed in
Installation Packages 1.2 earliest → < 1.2.9.3 1.2.9.3

Other CVEs of Installation Packages

The 2 CVEs of Installation Packages →
CVE-2019-6173 A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to… 6.7 Medium
Track this CVE