Description
An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | Vantage | < 1.1.0.51 | 1.1.0.51 |
References
- https://support.lenovo.com/us/en/product_security/LEN-223723 vendor-advisory