Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-3700 EUVD-2022-43058GHSA-3g2w-rhvj-j46g

A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier tha…

Published Oct 27, 2023 · Updated Sep 9, 2024 · Assigned by lenovo

Vendor: Lenovo Product: Vantage SystemUpdate Plugin

Description

A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files.

Affected products

VendorProductAffectedFixed
Lenovo Vantage SystemUpdate Plugin – < 2.0.0.213 2.0.0.213

References