CVE-2012-5931

2022-10-0316:15:31

CWE-22

[email protected]

web.nvd.nist.gov

cve-2012-5931

directory traversal

regclnt.dll

unifid.exe

netiq privileged user manager

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.7%

JSON

Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote authenticated users to create or overwrite arbitrary files via directory traversal sequences in a log pathname.

Affected configurations

NVD

Node

microfocusprivileged_user_managerMatch2.3.0

microfocusprivileged_user_managerMatch2.3.1

CPENameOperatorVersion
microfocus:privileged_user_managermicrofocus privileged user managereq2.3.0
microfocus:privileged_user_managermicrofocus privileged user managereq2.3.1

CPE	Name	Operator	Version
microfocus:privileged_user_manager	microfocus privileged user manager	eq	2.3.0
microfocus:privileged_user_manager	microfocus privileged user manager	eq	2.3.1