Threats tagged 'ghsa-c85m-27r2-238p'

A path traversal vulnerability exists in the TAR.GZ extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux. This flaw could allow an attacker to write arbitrary files with the privileges of the OneCLI process by tricking a user into processing a specially crafted TAR.GZ update package. The vulnerability has a medium severity rating with a CVSS score of 5.8.