CVE Vulnerabilities

CVE-2022-34888

Incorrect Comparison

Published: Jan 30, 2023 | Modified: Feb 08, 2023
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.

Weakness

The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.

Affected Software

Name Vendor Start Version End Version
Thinkagile_vx3331_firmware Lenovo * 1.80_afbt20n (excluding)

Extended Description

This Pillar covers several possibilities:

References