CVE-2012-5930

The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does not require authentication for the…

published December 24, 2012

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does not require authentication for the modifyAccounts method, which allows remote attackers to change the passwords of administrative accounts via a crafted application/x-amf request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07374 · 94.4th percentile
Published
2012-12-24T18:00Z
EPSS history
Timeline
  • 24 DEC 18:00Z
    The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does not require authentication for the…
    cvelistv5