What is CVE-2016-2393?

CVE-2016-2393 is a high-severity vulnerability in Lenovo Fingerprint Manager, classified under CWE-264. CVSS score: 7.8/10. Published 2016-04-11.

How severe is CVE-2016-2393?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Lenovo Fingerprint Manager

CVE-2016-2393

Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, which allows local users to gain privileges by invalidating local checks.

EPSS: 0.003 (24.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Lenovo Fingerprint_manager
Lenovo Touch_fingerprint
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2016-2393?: CVE-2016-2393 is a high-severity vulnerability in Lenovo Fingerprint Manager, classified under CWE-264. CVSS score: 7.8/10. Published 2016-04-11.
How severe is CVE-2016-2393?: High severity. CVSS v3 base score is 7.8 out of 10.