CVEvulnerability
CVE-2016-2393
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-04-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, which allows local users to gain privileges by invalidating local checks.
Affected configurations
• lenovo fingerprint manager (<= 8.01.56)
• lenovo touch fingerprint (<= 1.00.07)
Related
Weakness · not in database (1)
References
- https://support.lenovo.com/us/en/product_security/len_4282 Patch, Vendor Advisory
- https://support.lenovo.com/us/en/product_security/len_4282 Patch, Vendor Advisory