CVE-2018-9072

CVE-2018-9072 affects LXCI for VMware (versions prior to 5.5). Authenticated users can download any system file due to insufficient input sanitization during file downloads. The NVD entry confirms the flaw and impact; Lenovo advisory LEN-23800 specifies remediation: update to LXCI for VMware vers...

CVE-2018-9072 LXCI for VMware

In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads...