Unrated severityNVD Advisory· Published Nov 30, 2018· Updated Aug 5, 2024

LXCI for VMware and LXCI for Microsoft System Center

CVE-2018-16097

Description

LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate.

Affected products

Lenovo/LXCI for Microsoft System Centerllm-create2 versions
<3.5+ 1 more
- (no CPE)range: <3.5
- (no CPE)range: unspecified
Lenovo/LXCI for VMwarellm-fuzzy2 versions
<5.5+ 1 more
- (no CPE)range: <5.5
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

support.lenovo.com/us/en/solutions/LEN-23800mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000