CVE-2012-1196

no score yetEPSS 51%

Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. (dot dot) in the filename parameter in a SetTaskLogByFile SOAP request.

EPSS: 51% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2012-02-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

landesk:lenovo_thinkmanagement_console

References

http://osvdb.org/79277
http://secunia.com/advisories/47666
http://www.securityfocus.com/bid/52023
http://www.securitytracker.com/id?1026693
https://exchange.xforce.ibmcloud.com/vulnerabilities/73208

Check your stack JSON