Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Lenovo LXCI for VMware 5.5 Clear all filters
TI-2018-11523 CVE-2018-16097 · GHSA-g4v6-2497-jh7q

Unrestricted file upload in Lenovo LXCI for VMware

Priority LOW 29

LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificat…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00453 Published 2018-11-30 Fixed in 5.5, 3.5 CWE-434
TI-2018-11519 CVE-2018-16093 · GHSA-442g-g3hv-vwp5

Unrestricted file upload in Lenovo LXCI for VMware

Priority LOW 30

In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00733 Published 2018-11-30 Fixed in 5.5 CWE-434
TI-2018-06588 CVE-2018-9072 · GHSA-97fh-7m8x-9fcg

Improper input validation in Lenovo LXCI for VMware

Priority LOW 30

In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00858 Published 2018-11-30 Fixed in 5.5 CWE-20