CVE-2016-2393

Published: Apr 11, 2016Modified: May 6, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, which allows local users to gain privileges by invalidating local checks.

Affected (2)

Products: Lenovo: Fingerprint Manager, Touch Fingerprint

Lenovo

2 products

Fingerprint Manager

Touch Fingerprint

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Lenovo Fingerprint Manager	Up to 8.01.56
Lenovo Touch Fingerprint	Up to 1.00.07

Related CWEs

CWE-264

References (2)

https://support.lenovo.com/us/en/product_security/len_4282

Source: cve@mitre.org

PatchVendor Advisory

https://support.lenovo.com/us/en/product_security/len_4282

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.