4 matches found
CVE-2017-3742
In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection is made between two systems for the purpose of sharing files, the password for this ad-hoc connection will be stored in a user-readable location. An attacker with read access to t...
CVE-2017-3742
CVE-2017-3742 details from Lenovo advisory: Lenovo Connect2 stores the ad-hoc connection password in a user-readable location on Windows builds before 4.2.5.4885 and Android builds before 4.2.5.3071. This allows an attacker with access to the user’s files to view the contents being transferred vi...
Lenovo Connect2 Ad-hoc Wifi Network Key Stored in User-readable Location - us
Lenovo Security Advisory: LEN-14398 Potential Impact: Disclosure of ad-hoc wifi network key stored in user-readable location Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3742 Summary Description: An internal assessment has identified a vulnerability in Lenovo Connect...