PT-2012-3123 · Lenovo · Lenovo Thinkmanagement Console

Publicado 2012-02-18 · Atualizado 2017-08-29 · CVE-2012-1196

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Lenovo ThinkManagement Console version 9.0.3

Description A directory traversal issue exists in the VulCore web service, allowing remote attackers to delete arbitrary files. This is achieved by including a .. (dot dot) in the filename parameter within a SetTaskLogByFile SOAP request to the 'WSVulnerabilityCore/VulCore.asmx' endpoint.

Recommendations For Lenovo ThinkManagement Console version 9.0.3, restrict access to the VulCore web service to minimize the risk of exploitation. Avoid using the filename parameter in the SetTaskLogByFile SOAP request to the 'WSVulnerabilityCore/VulCore.asmx' endpoint until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2012-1196

Produtos afetados

Lenovo Thinkmanagement Console

Referências · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/landesk_thinkmanagement_upload_asp.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18714 · Exploit
• 🔥 https://exploit-db.com/exploits/18623 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-1196 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73208 · Nota
• http://securityfocus.com/bid/52023 · Nota
• http://osvdb.org/79277 · Nota
• http://secunia.com/advisories/47666 · Aviso do Fabricante
• http://securitytracker.com/id?1026693 · Nota