LXCI for VMware and LXCI for Microsoft System Center
CVE-2018-16097

6.5MEDIUM

Key Information:

Vendor
Lenovo
Status
Lxci For Vmware
Lxci For Microsoft System Center
Vendor
CVE Published:
30 November 2018

Summary

LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate.

Affected Version(s)

LXCI for Microsoft System Center < 3.5

LXCI for VMware < 5.5

References

https://support.lenovo.com/us/en/solutions/LEN-23800
x_refsource_CONFIRM

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.