Description
A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Lenovo Personal Cloud T2s
Default version status: unaffected
0 to < 5.5.6.t2s.3affected
Lenovo Personal Cloud T2Pro
Default version status: unaffected
0 to < 5.4.8.t2pro.2affected
Lenovo Personal Cloud X1s
Default version status: unaffected
0 to < 5.4.8.x1s.2affected
Lenovo Home Storage Hub T20
Default version status: unaffected
0 to < 5.5.8.t20.1affected
Lenovo Home Storage Hub X20
Default version status: unaffected
0 to < 5.4.4.x20.1affected
Lenovo Personal Cloud T1
Default version status: unaffected
0 to ≤ 5.4.0.t1.6affected
Lenovo Personal Cloud A1
Default version status: unaffected
0 to ≤ 5.4.2.a1.3affected
Lenovo Personal Cloud A1s
Default version status: unaffected
0 to ≤ 5.5.6.a1saffected
Lenovo Personal Cloud T2
Default version status: unaffected
0 to ≤ 5.4.5.t2.2affected
Lenovo Personal Cloud X1
Default version status: unaffected
0 to ≤ 5.4.7.x1.1affected