CVE-2015-3321

6.7MEDIUM

Key Information:

Vendor
Lenovo
Status
Fingerprint Manager
Vendor
CVE Published:
3 October 2017

Summary

Services and files in Lenovo Fingerprint Manager before 8.01.42 have incorrect ACLs, which allows local users to invalidate local checks and gain privileges via standard filesystem operations.

References

https://support.lenovo.com/us/en/product_security/lenovo_fpr
x_refsource_CONFIRM

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.