EUVD-2018-7954

Malware in sbrugna...

CVE-2019-6179

An XML External Entity XXE processing vulnerability was reported in Lenovo XClarity Administrator LXCA prior to version 2.5.0 , Lenovo XClarity Integrator LXCI for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator LXCI for VMWare vCenter prior to version 6.1.0 that...

Xxe

An XML External Entity XXE processing vulnerability was reported in Lenovo XClarity Administrator LXCA prior to version 2.5.0 , Lenovo XClarity Integrator LXCI for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator LXCI for VMWare vCenter prior to version 6.1.0 that...

CVE-2019-6179

An XML External Entity XXE processing vulnerability was reported in Lenovo XClarity Administrator LXCA prior to version 2.5.0 , Lenovo XClarity Integrator LXCI for Microsoft System Center prior to version 7.7.0, and Lenovo XClarity Integrator LXCI for VMWare vCenter prior to version 6.1.0 that...

CVE-2019-6179

CVE-2019-6179 is an XML External Entity (XXE) processing vulnerability found in Lenovo XClarity Administrator (LXCA) before 2.5.0, Lenovo XClarity Integrator (LXCI) for Microsoft System Center before 7.7.0, and LXCI for VMware vCenter before 6.1.0. The issue, as described in Lenovo’s advisory, co...

LXCA and LXCI Insufficient Input Validation - US

Lenovo Security Advisory: LEN-27805 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6179, CVE-2019-6180, CVE-2019-6181, CVE-2019-6182 Summary Description: Vulnerabilities reported in Lenovo XClarity Administrator...

CVE-2018-9072

In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads...

Input validation

In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads...

CVE-2018-16097

LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate...

Design/Logic Flaw

LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate...

CVE-2018-9072

In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads...

CVE-2018-16093

In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file...

CVE-2018-9072

In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads...

CVE-2018-16093

In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file...

CVE-2018-9072

CVE-2018-9072 affects LXCI for VMware (versions prior to 5.5). Authenticated users can download any system file due to insufficient input sanitization during file downloads. The NVD entry confirms the flaw and impact; Lenovo advisory LEN-23800 specifies remediation: update to LXCI for VMware vers...

CVE-2018-16093 LXCI for VMware

In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file...

CVE-2018-16097

Lenovo XClarity Integrator (LXCI) for VMware and LXCI for Microsoft System Center are affected. Versions prior to 5.5 (VMware) and 3.5 (System Center) allow an authenticated user to write to arbitrary system files due to insufficient validation during certificate upload. The CVE entry CVE-2018-16...

CVE-2018-16097 LXCI for VMware and LXCI for Microsoft System Center

LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate...

CVE-2018-16093

CVE-2018-16093 affects Lenovo XClarity Integrator for VMware prior to version 5.5. An authenticated user can write to arbitrary system files due to insufficient filtering during backup file uploads. CNVD/NVD entries corroborate this behavior. Remediation: upgrade LXCI for VMware to version 5.5 or...

CVE-2018-9072 LXCI for VMware

In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads...