CVE-2012-1196 | BDVDB-2026-49236 Detail

Description#

Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. (dot dot) in the filename parameter in a SetTaskLogByFile SOAP request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id?1026693
http://www.securityfocus.com/bid/52023
https://exchange.xforce.ibmcloud.com/vulnerabilities/73208
http://osvdb.org/79277
http://secunia.com/advisories/47666

Exploit#

No public exploit known

History#

Version 12012-02-18Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.