Description
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying an application configuration file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | Vantage | < 10.2501.20.0 | 10.2501.20.0 |
| Lenovo | Commercial Vantage | < 20.2506.39.0 | 20.2506.39.0 |