PT-2018-18833 · Vmware · Lxci

CVE-2018-9072

Published

2018-11-30

Updated

2018-12-28

CVSS v3.1

6.5

Medium

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions LXCI for VMware versions prior to 5.5

Description The issue allows an authenticated user to download any system file due to insufficient input sanitization during file downloads.

Recommendations For versions prior to 5.5, update to version 5.5 or later to resolve the issue.

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2018-9072

Lxci