13365 matches found
Lenovo XClarity Integrator for Vmware and Microsoft System Center File Write Vulnerability
Lenovo XClarity Integrator LXCI for Vmware is an application for Vmware from Lenovo, China. The program provides extended functionality for infrastructure resource management, automation, and IT service management.LXCI for Microsoft System Center is a version for Microsoft System Center. A securi...
Lenovo XClarity Integrator for Vmware File Write Vulnerability
Lenovo XClarity Integrator LXCI for Vmware is an application for Vmware from Lenovo, China. The program provides extended functionality for infrastructure resource management, automation and IT service management. A security vulnerability exists in Lenovo LXCI for Vmware prior to version 5.5, whi...
CVE-2018-16093
In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file...
CVE-2018-16093
In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file...
CVE-2018-16097
LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate...
CVE-2018-9072
In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads...
CVE-2018-9072
In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads...
CVE-2018-16097
LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate...
Design/Logic Flaw
In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file...
Input validation
In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads...
CVE-2018-16093
CVE-2018-16093 affects Lenovo XClarity Integrator for VMware prior to version 5.5. An authenticated user can write to arbitrary system files due to insufficient filtering during backup file uploads. CNVD/NVD entries corroborate this behavior. Remediation: upgrade LXCI for VMware to version 5.5 or...
CVE-2018-9072 LXCI for VMware
In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads...
CVE-2018-16097 LXCI for VMware and LXCI for Microsoft System Center
LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate...
CVE-2018-16093 LXCI for VMware
In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file...
CVE-2018-16097
Lenovo XClarity Integrator (LXCI) for VMware and LXCI for Microsoft System Center are affected. Versions prior to 5.5 (VMware) and 3.5 (System Center) allow an authenticated user to write to arbitrary system files due to insufficient validation during certificate upload. The CVE entry CVE-2018-16...
CVE-2018-9072
CVE-2018-9072 affects LXCI for VMware (versions prior to 5.5). Authenticated users can download any system file due to insufficient input sanitization during file downloads. The NVD entry confirms the flaw and impact; Lenovo advisory LEN-23800 specifies remediation: update to LXCI for VMware vers...
VMware vSphere Data Protection 6.0.x < 6.0.9 / 6.1.x < 6.1.10 Multiple Vulnerabilities (VMSA-2018-0029)
The version of VMware vSphere Data Protection installed on the remote host is 6.0.x 6.0.9 and 6.1.x 6.1.10. It is, therefore, affected by the following vulnerabilities: - A remote command execution vulnerability. An unauthenticated, remote attacker can exploit this to bypass authentication and...
Security Bulletin: A security vulnerability has been identified in IBM Java shipped with VMware VI agent (CVE-2015-0488, CVE-2015-0204, CVE-2015-2808, CVE-2013-0443, CVE-2015-2625 and CVE-2015-1931)
Summary IBM Java is shipped as a component of VMware VI agent. Information about a security vulnerability affecting IBM Java has been published in a security bulletin. Note: Please see technote for upgrading Java runtime for VMware VI agent at...
"Failed to detach SCSI lun" errors in vSphere after finishing Instant Recovery or File-level restore from storage snapshots
Challenge You might see "Failed to detach SCSI lun" errors in vSphere during the unexport phase when restoring items file-level restore from storage snapshot or doing an Instant Recovery from storage snapshot because of certain VMware behaviour. Both types of the restores include a step when...
