CVE-2012-5931 Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote authenticated users to create or ove...

MediumCVSS 5.5 EPSS 7.3% Public exploit

Published: 2012-12-24 20:00
Updated: 2026-06-17 02:47
Exploit status: Public exploit available

Description

Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote authenticated users to create or overwrite arbitrary files via directory traversal sequences in a log pathname.

Affected products

Product	Affected versions	Fixed in
microfocus privileged user manager	= 2.3.0	No fix listed
microfocus privileged user manager	= 2.3.1	No fix listed

References

CVSS v2.0

5.5 Medium

AV:N/AC:L/Au:S/C:N/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: Single
Confidentiality: None
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 7.28% (percentile 94.4)
CWE: CWE-22

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Novell NetIQ Privileged User Manager 2.3.1 - 'auth.dll' pa_modify_accounts() Remote Code Execution Exploit · Exploit Database (OffSec) · 2012-11-15