The password checking routine of the IBM Lenovo BIOS firmware fails to sanitize the BIOS keyboard buffer after reading user input, resulting in plain text password leakage to local users.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/69375/IVIZ-08-005.txt
Source: https://packetstormsecurity.com/files/69375/IVIZ-08-005.txt.html