Medium severity6.5NVD Advisory· Published Nov 30, 2018· Updated Jun 17, 2026

CVE-2018-9072

Description

In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads.

Affected products

Lenovo/Xclarity Integrator
cpe:2.3:a:lenovo:xclarity_integrator:*:*:*:*:*:vcenter:*:*
Range: <5.5
VMware/LXCIllm-create
Range: <5.5
Lenovo/LXCI for VMwarecpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

support.lenovo.com/us/en/solutions/LEN-23800nvdPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000