CVE-2020-8318

CWE-269 — Improper Privilege Management3 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 68.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Lenovo Lenovosystemupdateplugin FOR Lenovo System Interface FoundationLenovo System Interface Foundation
Timeline
PublishedApr 14
Latest updateMay 24

Description

A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could allow an authenticated user to execute code with elevated privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 1.3 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-99mj-2r96-xhx2: A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could a↗2022-05-24
▶
CVEList
CVE-2020-8318: A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could a↗2020-04-14
▶