CVE-2018-16097

medium

Description

LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate.

References

https://support.lenovo.com/us/en/solutions/LEN-23800

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-7954

Details

Source: Mitre, NVD

Published: 2018-11-30

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N