PT-2012-3123 · Lenovo · Lenovo Thinkmanagement Console

Published 2012-02-18 · Updated 2017-08-29 · CVE-2012-1196

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Lenovo ThinkManagement Console version 9.0.3

Description A directory traversal issue exists in the VulCore web service, allowing remote attackers to delete arbitrary files. This is achieved by including a .. (dot dot) in the filename parameter within a SetTaskLogByFile SOAP request to the 'WSVulnerabilityCore/VulCore.asmx' endpoint.

Recommendations For Lenovo ThinkManagement Console version 9.0.3, restrict access to the VulCore web service to minimize the risk of exploitation. Avoid using the filename parameter in the SetTaskLogByFile SOAP request to the 'WSVulnerabilityCore/VulCore.asmx' endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2012-1196

Affected Products

Lenovo Thinkmanagement Console

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/landesk_thinkmanagement_upload_asp.rb · Exploit
• 🔥 https://exploit-db.com/exploits/18714 · Exploit
• 🔥 https://exploit-db.com/exploits/18623 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-1196 · Security Note
• http://secunia.com/advisories/47666 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73208 · Note
• http://securityfocus.com/bid/52023 · Note
• http://osvdb.org/79277 · Note
• http://securitytracker.com/id?1026693 · Note