Sensitive data stored by Lenovo Fingerprint Manager Pro, version 8.01.86 and earlier, including users' Windows logon credentials and fingerprint data, is encrypted using a weak algorithm, contains a hard-coded password, and is accessible to all users with local non-administrative access to the system in which it is installed.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2019/05/08/3 | |
http://www.openwall.com/lists/oss-security/2019/05/08/4 | |
http://www.openwall.com/lists/oss-security/2019/05/08/5 | |
http://www.securityfocus.com/bid/102837 | VDB Entry Third Party Advisory |
https://support.lenovo.com/product_security/LEN-15999 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2018-01-26 01:29
Updated : 2024-02-28 16:25
NVD link : CVE-2017-3762
Mitre link : CVE-2017-3762
CVE.ORG link : CVE-2017-3762
JSON object : View
Products Affected
microsoft
- windows_8.1
- windows_7
- windows_8
lenovo
- fingerprint_manager_pro
CWE
CWE-798
Use of Hard-coded Credentials