CVE-2012-1195: High severity ivanti landesk management suite vulnerability
Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via a PutUpdateFileCore command in a RunAMTCommand SOAP request, then accessing the file via a direct request to the file in the web root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1195?
CVE-2012-1195 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2012-1195?
To mitigate CVE-2012-1195, upgrade to the latest version of Lenovo ThinkManagement Console that has addressed this vulnerability.
What type of vulnerability is CVE-2012-1195?
CVE-2012-1195 is an unrestricted file upload vulnerability that allows attackers to upload executable files.
Which software is affected by CVE-2012-1195?
CVE-2012-1195 affects Lenovo ThinkManagement Console version 9.0.3.
Can CVE-2012-1195 lead to a data breach?
Yes, CVE-2012-1195 can potentially lead to a data breach by allowing unauthorized remote code execution.