Race condition in Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses world-writable permissions for the update files directory, which allows local users to gain privileges by writing to an update file after the signature is validated.
CPE | Name | Operator | Version |
---|---|---|---|
system_update | le | 5.06.0027 |