Description
In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificate.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo Group | Service Bridge | Earlier than version 4 | — |