CVE-2017-3762

Sensitive data stored by Lenovo Fingerprint Manager Pro, version 8.01.86 and earlier, including users' Windows logon credentials and fingerprint data, is encrypted using a weak algorithm, contains a hard-coded password, and is accessible to all users with local non-administrative access to the system in which it is installed.

• CWE-798

• http://www.openwall.com/lists/oss-security/2019/05/08/3
• http://www.openwall.com/lists/oss-security/2019/05/08/4
• http://www.openwall.com/lists/oss-security/2019/05/08/5
• http://www.securityfocus.com/bid/102837Third Party Advisory, VDB Entry
• https://support.lenovo.com/product_security/LEN-15999Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2019/05/08/3
• http://www.openwall.com/lists/oss-security/2019/05/08/4
• http://www.openwall.com/lists/oss-security/2019/05/08/5
• http://www.securityfocus.com/bid/102837Third Party Advisory, VDB Entry
• https://support.lenovo.com/product_security/LEN-15999Patch, Vendor Advisory

Published

Jan 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3756A privilege escalation vulnerability was identified in Lenov…
• CVE-2017-3757An unquoted service path vulnerability was identified in the…
• CVE-2017-3758Improper access controls on several Android components in th…
• CVE-2017-3759The Lenovo Service Framework Android application accepts som…
• CVE-2017-3760The Lenovo Service Framework Android application uses a set …
• CVE-2017-3761The Lenovo Service Framework Android application executes so…
• CVE-2017-3763An attacker who obtains access to the location where the LXC…
• CVE-2017-3764A vulnerability was identified in Lenovo XClarity Administra…
• CVE-2017-3765In Enterprise Networking Operating System (ENOS) in Lenovo a…
• CVE-2017-3766Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2017-3767A local privilege escalation vulnerability was identified in…
• CVE-2017-3768An unprivileged attacker with connectivity to the IMM2 could…