CVE-2009-0655

Description

Lenovo Veriface III allows physically proximate attackers to login to a Windows account by presenting a "plain image" of the authorized user.

Affected Platforms

Weakness Type

CWE-287

References

• http://security.bkis.vn/?p=292
• http://www.blackhat.com/html/bh-dc-09/bh-dc-09-archives.html#Nguyen
• http://www.blackhat.com/presentations/bh-dc-09/Nguyen/BlackHat-DC-09-Nguyen-Face…
• http://www.securityfocus.com/archive/1/498997
• http://www.securityfocus.com/bid/32700
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48961