CVE-2015-2233 in System Update
Сводка (Английский)
Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 does not properly validate CA chains during signature validation, which allows man-in-the-middle attackers to upload and execute arbitrary files via a crafted certificate.
Be aware that VulDB is the high quality source for vulnerability data.
Резервировать
06.03.2015
Раскрытие
12.05.2015
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 75210 | Lenovo System Update CA Certificate Validator слабое шифрование | 310 | Не определено | Официальное исправление | CVE-2015-2233 |