PT-2017-6666 · Lenovo · Lenovo Fingerprint Manager

Publicado 2017-10-02 · Atualizado 2017-10-17 · CVE-2015-3321

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lenovo Fingerprint Manager versions prior to 8.01.42

Description The issue arises from incorrect Access Control Lists (ACLs) applied to services and files in the Lenovo Fingerprint Manager. This incorrect configuration allows local users to bypass local security checks, potentially gaining elevated privileges through standard file system operations.

Recommendations For versions prior to 8.01.42, update to version 8.01.42 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-3321

Produtos afetados

Lenovo Fingerprint Manager

Referências · 2

• https://support.lenovo.com/us/en/product_security/lenovo_fpr · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-3321 · Nota de Segurança