For now, just doing a simple update of the Lenovo software will keep you protected. Of course, the opportunity to get a free Windows 10 upgrade is gone but it is a much better OS than the previous iterations. We’d recommend going a step further and updating your Windows 7, 8, and 8.1 system to Windows 10. ThinkPad X1 Carbon (Type 20A7, 20A8), X1 Carbon (Type 20BS, 20BT).Windows 10 systems do not use the Lenovo Fingerprint Manager Pro software but instead, use Microsoft’s built-in fingerprint reader support. Here is a list of Lenovo computers that may be affected, noting again that Windows 10 users are NOT affected. It is recommended that you update your Lenovo software to version 8.01.87 or later which will get rid of the vulnerability. The vulnerability does not affect Windows 10 users, so if you’ve updated to 10 you should be clear. The fingerprint manager is used to login to Lenovo computers equipped with a fingerprint reader. Jackson Thuraisamy from Security Compass identified a vulnerability with Lenovo Fingerprint Manager Pro on Windows 7, 8, and 8.1. Sensitive data stored by Lenovo Fingerprint Manager Pro, including user Windows login credentials and fingerprint data, is encrypted using a weak algorithm, contains a hard-coded password, and is accessible to all users with local non-administrative access to the system it is installed in.
0 kommentar(er)
