CVE-2018-16093

In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file.

Score

CVSS 3.0 6.5 Medium

Status

Modified - psirt@lenovo.com

Published

2018-11-30

Last modified

2024-08-05

Weaknesses

CWE-434

Affected products

• Lxci For Vmware (Lenovo)
• Xclarity Integrator (Lenovo)

References

• https://support.lenovo.com/us/en/solutions/LEN-23800