CVE-2017-3762

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%

exploitation probability

0.4%top 69% of all CVEs

observed exploitation

nono source reports it

Sensitive data stored by Lenovo Fingerprint Manager Pro, version 8.01.86 and earlier, including users' Windows logon credentials and fingerprint data, is encrypted using a weak algorithm, contains a hard-coded password, and is accessible to all users with local non-administrative access to the system in which it is installed.

Affected products

Lenovo Group Ltd. · Lenovo Fingerprint Manager Pro

References

https://support.lenovo.com/product_security/LEN-15999 http://www.openwall.com/lists/oss-security/2019/05/08/3 http://www.openwall.com/lists/oss-security/2019/05/08/4 http://www.openwall.com/lists/oss-security/2019/05/08/5 http://www.securityfocus.com/bid/102837