CVE-2024-5474 — Lenovo / Dolby Vision Provisioning software

CVE-2024-5474

Lenovo / Dolby Vision Provisioning software PUBLISHED

Description (CNA)

A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on the system with elevated privileges during installation of the package. Previously installed versions are not affected by this issue.

Affected (CNA)

Vendor / product	Versions
Lenovo / Dolby Vision Provisioning software	affected 0 before 2.0.0.2

CWE

CWE-276

References

https://support.lenovo.com/us/en/product_security/LEN-158394

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.