CVE-2024-5474
Medium
Description
A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on the system with elevated privileges during installation of the package. Previously installed versions are not affected by this issue.
SeverityMedium
CVSS5.5
Exploit probability—
ProductLenovo Dolby Vision Provisioning
PublishedOct 11, 2024
First seenOct 11, 2024
Weakness typeCWE-276CWE-276
How to fix
Update
- lenovo dolby_vision_provisioning2.0.0.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo dolby_vision_provisioning | v < 2.0.0.2 | 2.0.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.