CVE-2025-8421_CVE-2025-8421

5.2 / 10

MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Description

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges.

Basic Information

ID CVE-2025-8421

Source lenovo

Published Nov 12, 2025 at 19:17

Modified Nov 12, 2025 at 21:03

Affected Product

Vendor Lenovo

Product Dock Manager

Affected Versions Lenovo Dock Manager 0

CWE Classification

CWE-276

References

support.lenovo.com /us/en/product_security/LEN-198729

{
    "lastseen": "",
    "description": "An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges.",
    "published": "2025-11-12T19:17:59.562Z",
    "modified": "2025-11-12T21:03:45.571Z",
    "type": "cve",
    "title": "CVE-2025-8421",
    "source": "lenovo",
    "references": "https://support.lenovo.com/us/en/product_security/LEN-198729",
    "id": "CVE-2025-8421",
    "bulletinFamily": "",
    "cwe": [
        "CWE-276"
    ],
    "cvelist": null,
    "sourceData": "Lenovo Dock Manager 0",
    "sourceHref": "",
    "cvss": {
        "score": 5.2,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Dock Manager",
    "version": "0",
    "vendor": "Lenovo",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}