Description
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | Commercial Vantage | < 20.2026.20.0 | 20.2026.20.0 |
| Lenovo | Vantage | < 10.2606.12 | 10.2606.12 |
References
- https://support.lenovo.com/us/en/product_security/LEN-223723 vendor-advisory