{"id":"CVE-2016-2393","aliases":["EUVD-2016-3477","GHSA-cx74-4f46-v8m6"],"status":"published","title":"Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for...","description":"Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, which allows local users to gain privileges by invalidating local checks.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00323,"percentile":0.25435,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2016-04-11T14:00:00Z","modified":"2026-06-17T00:43:57Z","products":[{"vendor":"lenovo","product":"fingerprint_manager"},{"vendor":"lenovo","product":"touch_fingerprint"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/len_4282","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2393"},{"url":"https://github.com/advisories/GHSA-cx74-4f46-v8m6"}],"sources":{"cve":[{"id":"CVE-2016-2393","description":"Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, which allows local users to gain privileges by invalidating local checks.","status":"published","published":"2016-04-11T14:00:00Z","modified":"2024-08-05T23:24:49.271Z","updated_at":"2026-11-02T14:33:33.07583Z"}],"euvd":[{"id":"EUVD-2016-3477","description":"Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, which allows local users to gain privileges by invalidating local checks.","status":"published","published":"2016-04-11T14:00:00Z","modified":"2024-08-05T23:24:49Z","updated_at":"2026-11-03T02:22:53.17975Z"}],"ghsa":[{"id":"GHSA-cx74-4f46-v8m6","title":"Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for...","description":"Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, which allows local users to gain privileges by invalidating local checks.","status":"published","published":"2022-05-17T03:57:16Z","modified":"2023-01-28T05:00:50Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:43:25.46952Z"}],"nvd":[{"id":"CVE-2016-2393","description":"Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified (1) services and (2) files, which allows local users to gain privileges by invalidating local checks.","status":"published","published":"2016-04-11T14:59:11.333Z","modified":"2026-06-17T00:43:57.883Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:23.795791Z"}]}}