CVEvulnerability
CVE-2015-3321
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-10-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.7 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Services and files in Lenovo Fingerprint Manager before 8.01.42 have incorrect ACLs, which allows local users to invalidate local checks and gain privileges via standard filesystem operations.
Affected configurations
• lenovo fingerprint manager (<= 8.01.41)
Related
Weakness · not in database (1)
References
- https://support.lenovo.com/us/en/product_security/lenovo_fpr Issue Tracking, Mitigation, Vendor Advisory
- https://support.lenovo.com/us/en/product_security/lenovo_fpr Issue Tracking, Mitigation, Vendor Advisory