

Users can download and update their Fingerprint Manager Pro to version 8.01.87 or later from here. More details about this security vulnerability are available over here at Lenovo. The company has credited Jackson Thuraisamy, a senior security consultant with Security Compass, for finding and disclosing this high severity security flaw affecting fingerprint scanner. ThinkPad X1 Carbon (Type 20A7, 20A8), X1 Carbon (Type 20BS, 20BT).Set up fingerprints in Windows Hello in Windows 10. Perform the instructions displayed to uninstall the software. As for the machines, following Lenovo systems are at risk: Right-click the application name from the list (such as Lenovo Fingerprint Manager Pro) and select Uninstall. Everyone who is running Lenovo Fingerprint Manager Pro for Windows 7, 8, and 8.1 is affected.

Rated high severity, Lenovo said that users need to install version 8.01.87 to fix these critical security issues. "Sensitive data stored by Lenovo Fingerprint Manager Pro, including users’ Windows logon credentials and fingerprint data, is encrypted using a weak algorithm, contains a hard-coded password, and is accessible to all users with local non-administrative access to the system it is installed in." Lenovo fixes hardcoded password flaw - impacted ThinkPad and other systems
