An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the application.
Weakness
The product does not validate, or incorrectly validates, a certificate.