Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-8201 State: PUBLISHED Published: 2017-01-14T19:00:00 Last Updated: 2024-08-06T02:13:21.856Z Vendors: n/a Products: Brocade Virtual Traffic Manager versions released prior to and including 11.0 Problem Types: Cross-Site Request Forgery Description: A CSRF vulnerability in Brocade Virtual Traffic Manager versions released prior to and including 11.0 could allow an attacker to trick a logged-in user into making administrative changes on the traffic manager cluster. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43681 - http://www.securityfocus.com/bid/95930 - https://www.kb.cert.org/vuls/id/192371
cles/Pulse_Security_Advisories/SA43681 - http://www.securityfocus.com/bid/95930 - https://www.kb.cert.org/vuls/id/192371 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44114 - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0005
CVE ID: CVE-2016-8202 State: PUBLISHED Published: 2017-05-08T18:00:00 Last Updated: 2024-08-06T02:13:21.819Z Vendors: Brocade Communications Systems, Inc. Products: Fibre Channel SAN products running Brocade Fabric OS (FOS). Problem Types: Privilege escalation. Description: A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected versions, non-root users can gain root access with a combination of shell commands and parameters. Additional Analyst Notes: - CVE P
n-root users can gain root access with a combination of shell commands and parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038401 - https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03739en_us - http://www.securityfocus.com/bid/98332 - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-208
CVE ID: CVE-2016-8203 State: PUBLISHED Published: 2016-10-31T21:00:00 Last Updated: 2024-08-06T02:13:21.822Z Vendors: n/a Products: Brocade MLX running on NetIron OS All Brocade MLX Line Cards running NetIron OS 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00 and 6.0.00a images Problem Types: Memory Corruption Description: A memory corruption in the IPsec code path of Brocade NetIron OS on Brocade MLXs 5.8.00 through 5.8.00e, 5.9.00 through 5.9.00bd, 6.0.00, and 6.0.00a images could allow attackers to cause a denial of service (line card reset) via certain constructed IPsec control packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/
ed IPsec control packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94232 - http://www.securitytracker.com/id/1037010 - http://www.brocade.com/en/backend-content/pdf-page.html?/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2016-168.pdf
CVE ID: CVE-2016-8204 State: PUBLISHED Published: 2017-01-14T19:00:00 Last Updated: 2024-08-06T02:13:21.862Z Vendors: n/a Products: Brocade Network Advisor versions released prior to and including 14.0.2 Problem Types: Directory Traversal Description: A Directory Traversal vulnerability in FileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95695 - http://www.zerodayinitiative.com/advisories/ZDI-17-049 - https://www.broadcom.com/support/f
ecurityfocus.com/bid/95695 - http://www.zerodayinitiative.com/advisories/ZDI-17-049 - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-177 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
CVE ID: CVE-2016-8205 State: PUBLISHED Published: 2017-01-14T19:00:00 Last Updated: 2024-08-06T02:13:21.873Z Vendors: n/a Products: Brocade Network Advisor versions released prior to and including 14.0.2 Problem Types: Directory Traversal Description: A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-17-050 - https://www.broadcom.com/support/fibre-channel-networking/security
p://www.zerodayinitiative.com/advisories/ZDI-17-050 - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-178 - http://www.securityfocus.com/bid/95694 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
CVE ID: CVE-2016-8206 State: PUBLISHED Published: 2017-01-14T19:00:00 Last Updated: 2024-08-06T02:13:21.851Z Vendors: n/a Products: Brocade Network Advisor versions released prior to and including 14.0.2 Problem Types: Directory Traversal Description: A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95692 - http://www.zerodayinitiative.com/advisories/ZDI-17-051 - https://www.broadcom.com/support/fibre-channel
.com/bid/95692 - http://www.zerodayinitiative.com/advisories/ZDI-17-051 - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-179 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
CVE ID: CVE-2016-8207 State: PUBLISHED Published: 2017-01-14T19:00:00 Last Updated: 2024-08-06T02:13:21.815Z Vendors: n/a Products: Brocade Network Advisor versions released prior to and including 14.0.2 Problem Types: Directory Traversal Description: A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with sensitive user information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95691 - http://www.zerodayinitiative.com/advisories/ZDI-17-052 - https://support.hpe.com/hpsc/doc/public/d
focus.com/bid/95691 - http://www.zerodayinitiative.com/advisories/ZDI-17-052 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-180
CVE ID: CVE-2016-8209 State: PUBLISHED Published: 2017-05-08T18:00:00 Last Updated: 2024-08-06T02:13:21.816Z Vendors: Brocade Communications Systems, Inc. Products: NetIron XMR/MLX and Brocade CES/CER on NetIron Problem Types: Denial of Service Attack Description: Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038402 - https://www.brocade.com/content/dam/comm
VE Program Container: References: - http://www.securitytracker.com/id/1038402 - https://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-315.htm
CVE ID: CVE-2016-8211 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-06T02:13:21.920Z Vendors: n/a Products: EMC Data Protection Advisor EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446 Problem Types: Path Traversal Vulnerability Description: EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446 has a path traversal vulnerability that may potentially be exploited by malicious users to compromise
prior to patch 446 has a path traversal vulnerability that may potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540067/30/0/threaded - http://www.securityfocus.com/bid/95833 - http://www.securitytracker.com/id/1037729
CVE ID: CVE-2016-8212 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-06T02:13:21.869Z Vendors: n/a Products: RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to 6.2.2 Problem Types: Improper OCSP Validation Vulnerability Description: An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. There is an Improper OCSP Validation Vulnerability. OCSP responses have two time values: thisUpdate and nextUpdate. These specify a validity period; however, both values are optional. Crypto-J treats the lack of a nextUpdate as indicating that the OCSP response is valid indefinitely instead of restricting its validity for a brief period surrounding the thisUpdat
the OCSP response is valid indefinitely instead of restricting its validity for a brief period surrounding the thisUpdate time. This vulnerability is similar to the issue described in CVE-2015-4748. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540066/30/0/threaded - http://www.securityfocus.com/bid/95831 - http://www.securitytracker.com/id/1037732
CVE ID: CVE-2016-8213 State: PUBLISHED Published: 2017-01-23T06:49:00 Last Updated: 2024-08-06T02:13:21.796Z Vendors: n/a Products: EMC Documentum Webtop and Clients Problem Types: Stored Cross-Site Scripting Description: EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6.7SP3, prior to P02; and EMC Documentum Capital Projects Version 1.9, prior to P30 and Version 1.10, prior to P17; and EMC Documentum Administrator Version 7.0, Version 7.1, and Version 7.2 prior to P18 contain a Stored Cross-Site Scripting Vulnerability that could potentially be exploited by malicious users to compromise the affected system. Additional Ana
g Vulnerability that could potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540019/30/0/threaded - http://www.securityfocus.com/bid/95625 - http://www.securitytracker.com/id/1037626
CVE ID: CVE-2016-8214 State: PUBLISHED Published: 2017-01-25T11:00:00 Last Updated: 2024-08-06T02:13:21.805Z Vendors: n/a Products: EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1 Problem Types: Privilege Escalation Vulnerability Description: EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1 contain a vulnerability that may allow malicious administrators to compromise Avamar servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540031/30/0/threaded - http://www.securityfocus.com/bid/95719 - http://www.securitytracker.com/id/1037667
CVE ID: CVE-2016-8215 State: PUBLISHED Published: 2017-01-25T11:00:00 Last Updated: 2024-08-06T02:13:21.892Z Vendors: n/a Products: EMC RSA Security Analytics versions prior to 10.6.2 Problem Types: Reflected Cross-Site Scripting Vulnerability Description: EMC RSA Security Analytics 10.5.3 and 10.6.2 contains fixes for a Reflected Cross-Site Scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540032/30/0/threaded - http://www.securitytracker.com/id/1037666 - http://www.securityfocus.com/bid/95718
CVE ID: CVE-2016-8216 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-06T02:13:21.835Z Vendors: n/a Products: EMC Data Domain DD OS EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family all versions prior to 5.7.2.10 Problem Types: Command Injection Vulnerability Description: EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family all versions
EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could potentially be exploited by malicious users to compromise the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540059/30/0/threaded - http://www.securitytracker.com/id/1037728 - http://www.securityfocus.com/bid/95829
CVE ID: CVE-2016-8217 State: PUBLISHED Published: 2017-02-03T07:24:00 Last Updated: 2024-08-06T02:13:21.795Z Vendors: n/a Products: RSA BSAFE Crypto-J RSA BSAFE Crypto-J versions prior to 6.2.2 Problem Types: PKCS#12 Timing Attack Vulnerability Description: EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability. A possible timing attack could be carried out by modifying a PKCS#12 file that has an integrity MAC for which the password is not known. An attacker could then feed the modified PKCS#12 file to the toolkit and guess the current MAC one byte at a time. This is possible because Crypto-J uses a non-constant-time method to compare the stored MAC with the
one byte at a time. This is possible because Crypto-J uses a non-constant-time method to compare the stored MAC with the calculated MAC. This vulnerability is similar to the issue described in CVE-2015-2601. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/540066/30/0/threaded - http://www.securityfocus.com/bid/95831 - http://www.securitytracker.com/id/1037732
CVE ID: CVE-2016-8218 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-06T02:13:21.828Z Vendors: n/a Products: Cloud Foundry Problem Types: Unauthenticated JWT signing algorithm in routing Description: An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users to the routing API, aka an "Unauthenticated JWT signing algorithm in routing" issue. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2016-8218/
CVE ID: CVE-2016-8219 State: PUBLISHED Published: 2017-06-13T06:00:00 Last Updated: 2024-08-06T02:13:21.853Z Vendors: n/a Products: Cloud Foundry Problem Types: over-privilege Description: An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the SpaceAuditor role is over-privileged with the ability to restage applications. This could cause application downtime if the restage fails. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/cve-2016-8219/
CVE ID: CVE-2016-8220 State: PUBLISHED Published: 2018-04-18T16:00:00Z Last Updated: 2024-09-16T22:20:31.669Z Vendors: Pivotal Products: Gemfire for PCF Problem Types: Information disclosure Description: Pivotal Gemfire for PCF, versions 1.6.x prior to 1.6.5.0 and 1.7.x prior to 1.7.1.0, contain an information disclosure vulnerability. The application inadvertently exposed WAN replication credentials at a public route. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pivotal.io/gemfire-cf/relnotes.html
CVE ID: CVE-2016-8221 State: PUBLISHED Published: 2017-01-12T22:00:00 Last Updated: 2024-08-06T02:13:21.836Z Vendors: Lenovo Group Ltd. Products: XClarity Administrator (LXCA) Problem Types: unspecified Description: Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded input/output modules (IOMs), certain log files viewable by authenticated users may contain passwords for internal administrative LXCA accounts with temporary passwords that are used internally by LXCA code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95417 - https://support.lenovo.com/us/en
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95417 - https://support.lenovo.com/us/en/product_security/LEN_10605
CVE ID: CVE-2016-8222 State: PUBLISHED Published: 2016-11-30T15:00:00 Last Updated: 2024-08-06T02:13:21.830Z Vendors: Lenovo Group Ltd. Products: ThinkPad systems Problem Types: Microsoft Device Guard protection bypass Description: A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mode (SMM) services. This could lead to a denial of service attack or allow certain BIOS variables or settings to be altered (such as boot sequence). The setting or changing of BIOS passwords is not affected by this vulnerability. Additional Analyst Notes: - CVE Program
he setting or changing of BIOS passwords is not affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94409 - https://support.lenovo.com/us/en/solutions/LEN_8327
CVE ID: CVE-2016-8223 State: PUBLISHED Published: 2016-11-29T20:00:00 Last Updated: 2024-08-06T02:13:21.875Z Vendors: Lenovo Group Ltd. Products: All ThinkPad, ThinkCentre, ThinkStation and Lenovo-branded systems preloaded with the Windows 10 operating system, or any system running Lenovo Companion, Lenovo Settings, or Lenovo ID. Problem Types: Lenovo System Interface Foundation Privilege Escalation? Description: During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with local privileges could run arbitrary code with administrator level privileges. Additiona
indows 10 PCs where a user with local privileges could run arbitrary code with administrator level privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN_10150 - http://www.securityfocus.com/bid/94597
CVE ID: CVE-2016-8224 State: PUBLISHED Published: 2016-11-29T20:00:00 Last Updated: 2024-08-06T02:13:21.877Z Vendors: Lenovo Group Ltd. Products: Lenovo Notebook models 110-14IBR/110-15IBR, B70-80, E31-80, E40-80, E41-80, E51-80, G40-80, G50-80, G50-80 Touch, Ideapad 300-14IBR/300-15IBR, Ideapad 300-14ISK/300-15ISK/300-17ISK, Ideapad 510S-12ISK, K21-80, K41-80, MIIX 710-12IKB , XiaoXin Air 12, YOGA 510-14ISK/510-15ISK, YOGA 710-11IKB, Yoga 710-11ISK, Yoga 900-13ISK, YOGA 900S-12ISK; ThinkServer models ThinkServer TS150, ThinkServer TS450 Problem Types: Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems Description: A vulnerability has been identified i
ne protection not set on some Lenovo Notebook and ThinkServer systems Description: A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94595 - https://support.lenovo.com/us/en/solutions/LEN_9903
CVE ID: CVE-2016-8225 State: PUBLISHED Published: 2017-01-26T17:00:00 Last Updated: 2024-08-06T02:13:21.889Z Vendors: Lenovo Group Ltd. Products: Edge and Slim USB Keyboard Driver Problem Types: Unquoted service path privilege escalation Description: Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/solutions/LEN-11588 - http://www.securityfocus.com/bid/95842
CVE ID: CVE-2016-8226 State: PUBLISHED Published: 2017-01-26T17:00:00 Last Updated: 2024-08-06T02:13:21.974Z Vendors: Lenovo Group Ltd. Products: System X M5, M6, and X6 BIOS Problem Types: Denial of service Description: The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95844 - https://support.lenovo.com/us/en/solutions/LEN-11306
CVE ID: CVE-2016-8227 State: PUBLISHED Published: 2017-01-26T17:00:00 Last Updated: 2024-08-06T02:13:21.912Z Vendors: Lenovo Group Ltd. Products: Transition application Problem Types: Privilege escalation Description: Privilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and Miix systems running Windows allows local users to execute code with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95159 - https://support.lenovo.com/us/en/product_security/LEN-12508
CVE ID: CVE-2016-8228 State: PUBLISHED Published: 2017-06-03T00:00:00 Last Updated: 2024-08-06T02:13:21.974Z Vendors: Lenovo Group Ltd. Products: Service Bridge Problem Types: Privilege Escalation Description: In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-10149
CVE ID: CVE-2016-8229 State: PUBLISHED Published: 2017-06-03T00:00:00 Last Updated: 2024-08-06T02:13:21.912Z Vendors: Lenovo Group Ltd. Products: Service Bridge Problem Types: CSRF Description: A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-10149
CVE ID: CVE-2016-8230 State: PUBLISHED Published: 2017-06-03T00:00:00 Last Updated: 2024-08-06T02:13:21.920Z Vendors: Lenovo Group Ltd. Products: Service Bridge Problem Types: Insecure HTTP connection Description: In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to Lenovo's servers. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-10149
CVE ID: CVE-2016-8231 State: PUBLISHED Published: 2017-06-03T00:00:00 Last Updated: 2024-08-06T02:13:21.834Z Vendors: Lenovo Group Ltd. Products: Service Bridge Problem Types: Insecure code signing certificate validation Description: In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificate. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-10149