CVE-2018-9072

CVE-2018-9072: vulnerability in Lenovo LXCI for VMware

LXCI for VMware

Published · Updated

Follow this CVE+ Monitor LXCI for VMware

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads.
Affected products
Lenovo · LXCI for VMware
Related CVEs — Lenovo LXCI for VMware

In the same product, most dangerous first.

CVE-2018-16093—LXCI for VMwareEPSS 0.7%CVE-2018-16097—LXCI for VMware and LXCI for Microsoft System CenterEPSS 0.5%