CVE-2018-16097 LXCI for VMware and LXCI for Microsoft System Center

2018-11-3014:00:00

lenovo

www.cve.org

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

JSON

LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate.

CNA Affected

[
  {
    "product": "LXCI for VMware",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "5.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "LXCI for Microsoft System Center",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "3.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

support.lenovo.com/us/en/solutions/LEN-23800