CVE-2025-8421CWE-276

CVE-2025-8421

Medium · published November 13, 2025

CVSS v3.1
6.6
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00110 · 1.2th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-11-13T01:15Z
References (1)
https://support.lenovo.com/us/en/product_security/LEN-198729 · [email protected]
EPSS history
Timeline
  • 12 NOV 19:17Z
    An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an…
    cvelistv5