CVEvulnerability

CVE-2025-8421

5.2 MEDIUM Published 2025-11-12 Modified 2026-10-18 Official page ↗
Status
Deferred
Published
2025-11-12
Last modified
2026-10-18
Assigner
[email protected]
CVSS 4.0 ([email protected])
5.2 MEDIUM — CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
6.6 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
Weaknesses
CWE-276

Description

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges.

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References