CVE-2012-5932

2022-10-0316:15:31

CWE-94

[email protected]

web.nvd.nist.gov

cve-2012-5932

eval injection

ldap

netiq privileged user manager

security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.799 High

EPSS

Percentile

98.3%

JSON

Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request.

Affected configurations

NVD

Node

microfocusprivileged_user_managerMatch2.3.0

microfocusprivileged_user_managerMatch2.3.1

CPENameOperatorVersion
microfocus:privileged_user_managermicrofocus privileged user managereq2.3.0
microfocus:privileged_user_managermicrofocus privileged user managereq2.3.1

CPE	Name	Operator	Version
microfocus:privileged_user_manager	microfocus privileged user manager	eq	2.3.0
microfocus:privileged_user_manager	microfocus privileged user manager	eq	2.3.1