Lenovo ThinkManagement Console Multiple Security Bypass Vulnerabilities

Bugtraq ID:	52023
Class:	Design Error
CVE:	CVE-2012-1195 CVE-2012-1196
Remote:	Yes
Local:	No
Published:	Feb 15 2012 12:00AM
Updated:	Apr 09 2012 11:20AM
Credit:	Andrea Micalizzi
Vulnerable:	LANDesk Software Lenovo ThinkManagement Console 9.0.3
Not Vulnerable:

Lenovo ThinkManagement Console Multiple Security Bypass Vulnerabilities

Lenovo ThinkManagement Console is prone to multiple security-bypass vulnerabilities.

Successfully exploiting these issues will allow attackers to bypass security restrictions and perform unauthorized actions.

Lenovo ThinkManagement Console 9.0.3 is vulnerable; other versions may also be affected.

Lenovo ThinkManagement Console Multiple Security Bypass Vulnerabilities

The following exploits are available:

• /data/vulnerabilities/exploits/52032.php
• /data/vulnerabilities/exploits/52023.rb

Lenovo ThinkManagement Console Multiple Security Bypass Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Lenovo ThinkManagement Console Multiple Security Bypass Vulnerabilities

References:

• Lenovo ThinkManagement Console Homepage (LANDesk Software)