Sensitive data stored by Lenovo Fingerprint Manager Pro, version 8.01.86 and earlier, including users' Windows logon credentials and fingerprint data, is encrypted using a weak algorithm, contains a hard-coded password, and is accessible to all users with local non-administrative access to the system in which it is installed.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2019/05/08/3 | |
| http://www.openwall.com/lists/oss-security/2019/05/08/4 | |
| http://www.openwall.com/lists/oss-security/2019/05/08/5 | |
| http://www.securityfocus.com/bid/102837 | Third Party Advisory VDB Entry |
| https://support.lenovo.com/product_security/LEN-15999 | Patch Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2019/05/08/3 | |
| http://www.openwall.com/lists/oss-security/2019/05/08/4 | |
| http://www.openwall.com/lists/oss-security/2019/05/08/5 | |
| http://www.securityfocus.com/bid/102837 | Third Party Advisory VDB Entry |
| https://support.lenovo.com/product_security/LEN-15999 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 03:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.openwall.com/lists/oss-security/2019/05/08/3 - | |
| References | () http://www.openwall.com/lists/oss-security/2019/05/08/4 - | |
| References | () http://www.openwall.com/lists/oss-security/2019/05/08/5 - | |
| References | () http://www.securityfocus.com/bid/102837 - Third Party Advisory, VDB Entry | |
| References | () https://support.lenovo.com/product_security/LEN-15999 - Patch, Vendor Advisory |
Information
Published : 2018-01-26 01:29
Updated : 2024-11-21 03:26
NVD link : CVE-2017-3762
Mitre link : CVE-2017-3762
CVE.ORG link : CVE-2017-3762
JSON object : View
Products Affected
microsoft
- windows_8.1
- windows_8
- windows_7
lenovo
- fingerprint_manager_pro
CWE
CWE-798
Use of Hard-coded Credentials