Back to Database
Status published
Medium
CVE-2012-1196
Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in...
Vulnerability Description
Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. (dot dot) in the filename parameter in a SetTaskLogByFile SOAP request.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-1196
Credits & Attribution
No credits recorded in the NVD database.
References
More from landesk
View All →CVE-2014-5362
The admin interface in Landesk Management Suite 9.6 and earlier...
High
7.2
CVE-2014-5361
Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite...
Medium
6.8
CVE-2014-5360
Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK...
Medium
4.3
CVE-2012-1195
Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web...
High
7.5
CVE-2010-2892
gsb/drivers.php in LANDesk Management Gateway 4.0 through 4.0-1.48 and 4.2...
High
8.5
Affected Vendor
landesk
View all reports →Affected Software
lenovo thinkmanagement console
Vulnerable Versions:
9.0.3
Timeline
Official Publish:
February 18th, 2012
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.