CVE-2012-1196

MEDIUM 5.0CVE-2012-1196 · Published 18/02/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
lenovo thinkmanagement console landesk	`= 9.0.3`	No fix yet

Description

Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. (dot dot) in the filename parameter in a SetTaskLogByFile SOAP request.

References

osvdb.org/79277
secunia.com/advisories/47666 · Vendor Advisory
securityfocus.com/bid/52023
securitytracker.com/id
exchange.xforce.ibmcloud.com/vulnerabilities/73208

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free