An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to obtain sensitive user data from the application.
Weakness
The product does not validate, or incorrectly validates, a certificate.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Filez | Lenovo | * | 10.12.3.0 (excluding) |
| Filez | Lenovo | * | 11.1.0.35 (excluding) |