BaseFortify

Publication date: 2025-11-12

Last updated on: 2025-11-12

Assigner: Lenovo Group Ltd.

Description

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-12

Last Modified

2025-11-12

Generated

2026-07-06

AI Q&A

2025-11-13

EPSS Evaluated

2026-07-04

NVD

CVE-2025-8421

EUVD

EUVD-2025-131934

Affected Vendors & Products

Vendor	Product	Version / Range
lenovo	dock_manager	4.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-276	During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

Executive Summary

This vulnerability is an improper default permission issue in Lenovo Dock Manager. Under certain installation conditions, it allows an authenticated local user to redirect log files with elevated privileges, potentially enabling unauthorized actions.

Impact Analysis

The vulnerability can allow an authenticated local user to manipulate log files with elevated privileges, which may lead to unauthorized modification or redirection of logs. This could be exploited to hide malicious activity or escalate privileges on the affected system.

Hi! I’m here to help you understand CVE-2025-8421. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70