CVE-2018-16097

LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate.

Score

CVSS 3.0 6.5 Medium

Status

Modified - psirt@lenovo.com

Published

2018-11-30

Last modified

2024-08-05

Weaknesses

CWE-434

Affected products

• Lxci For Microsoft System Center (Lenovo)
• Lxci For Vmware (Lenovo)
• Xclarity Integrator (Lenovo)

References

• https://support.lenovo.com/us/en/solutions/LEN-23800