Services and files in Lenovo Fingerprint Manager before 8.01.42 have incorrect ACLs, which allows local users to invalidate local checks and gain privileges via standard filesystem operations.
References
Link | Resource |
---|---|
https://support.lenovo.com/us/en/product_security/lenovo_fpr | Issue Tracking Mitigation Vendor Advisory |
Configurations
Information
Published : 2017-10-02 18:29
Updated : 2017-10-17 08:31
NVD link : CVE-2015-3321
Mitre link : CVE-2015-3321
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
lenovo
- fingerprint_manager