📦

privileged_user_manager

Vendor: microfocus

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 3 Code Available
Total RCEs 1 Remote Access
Total CVEs 9 Total Indexed
Avg. EPSS 25.80% Exploit Prob.
Latest CVE CVE-2012-5932 Dec 24

Security Vulnerability Index

Page 1 / 1
10.0 CVSS
CVE-2012-5932
RCE Exploit Found

Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request.

EPSS: 62.75%
5.5 CVSS
CVE-2012-5931
Exploit Found

Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote authenticated users to create or overwrite arbitrary files via directory traversal sequences in a log pathname.

EPSS: 7.28%
6.4 CVSS
CVE-2012-5930
Exploit Found

The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does not require authentication for the modifyAccounts method, which allows remote attackers to change the passwords of administrative accounts via a crafted application/x-amf request.

EPSS: 7.37%