CVE-2016-8235

Privilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier than 2.0.16.3 allows local users to execute code with elevated privileges.

• CWE-264

• http://www.securityfocus.com/bid/97543Third Party Advisory, VDB Entry
• https://support.lenovo.com/us/en/solutions/LEN-11340Vendor Advisory
• http://www.securityfocus.com/bid/97543Third Party Advisory, VDB Entry
• https://support.lenovo.com/us/en/solutions/LEN-11340Vendor Advisory

Published

Apr 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8229A cross-site request forgery vulnerability in Lenovo Service…
• CVE-2016-8230In Lenovo Service Bridge before version 4, an insecure HTTP …
• CVE-2016-8231In Lenovo Service Bridge before version 4, a bug found in th…
• CVE-2016-8232Document Object Model-(DOM) based cross-site scripting vulne…
• CVE-2016-8233Log files generated by Lenovo XClarity Administrator (LXCA) …
• CVE-2016-8234Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8236Reset to default settings may occur in Lenovo ThinkServer TS…
• CVE-2016-8237Remote code execution in Lenovo Updates (not Lenovo System U…
• CVE-2016-8238Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8239Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8240Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8241Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…