CVE-2012-1196 Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. (dot....
MediumCVSS 5.0
EPSS 51.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. (dot dot) in the filename parameter in a SetTaskLogByFile SOAP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| landesk lenovo thinkmanagement console | = 9.0.3 | No fix listed |
References
- 79277 vdb-entry
- 47666 third-party-advisory vendor-advisory
- 52023 vdb-entry
- 1026693 vdb-entry
- thinkmanagement-vulcore-dir-traversal(73208) vdb-entry