CVE-2012-1196

Directory traversal vulnerability in the VulCore web service WSVulnerabilityCore/VulCore.asmx in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. dot dot in the filename parameter in a SetTaskLogByFile SOAP request...

CVE-2012-1196

Directory traversal vulnerability in the VulCore web service WSVulnerabilityCore/VulCore.asmx in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. dot dot in the filename parameter in a SetTaskLogByFile SOAP request...

PT-2012-3123

Name of the Vulnerable Software and Affected Versions Lenovo ThinkManagement Console version 9.0.3 Description A directory traversal issue exists in the VulCore web service, allowing remote attackers to delete arbitrary files. This is achieved by including a .. dot dot in the filename parameter...

CVE-2012-1196: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the VulCore web service WSVulnerabilityCore/VulCore.asmx in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. dot dot in the filename parameter in a SetTaskLogByFile SOAP request...

CVE-2012-1196

CVE-2012-1196 describes a directory traversal vulnerability in Lenovo ThinkManagement Console 9.0.3 within the VulCore web service (WSVulnerabilityCore/VulCore.asmx). A remote attacker can abuse the SetTaskLogByFile SOAP operation (via a filename parameter containing ..) to delete arbitrary files...