CVE-2012-1196

EPSS 55.5%

Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. (dot dot) in the filename parameter in a SetTaskLogByFile SOAP request.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/18714unverified exploitdbwww.exploit-db.com/exploits/18623unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/79277 http://secunia.com/advisories/47666 https://exchange.xforce.ibmcloud.com/vulnerabilities/73208 http://www.securityfocus.com/bid/52023 http://www.securitytracker.com/id?1026693