privileged user manager vulnerabilities and exploits

(subscribe to this query)

NA

Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x prior to 2.3.1 HF2 allows remote authenticated users to create or overwrite arbitrary files via directory traversal sequences in a log pathname.

Microfocus Privileged User Manager 2.3.1 Microfocus Privileged User Manager 2.3.0

1 EDB exploit

NA

The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x prior to 2.3.1 HF2 does not require authentication for the modifyAccounts method, which allows remote malicious users to change the passwords of administrative accounts via a crafted ...

Microfocus Privileged User Manager 2.3.0 Microfocus Privileged User Manager 2.3.1

1 EDB exploit

NA

Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x prior to 2.3.1 HF2 allows remote malicious users to execute arbitrary Perl code via a crafted application/x-amf request.

Microfocus Privileged User Manager 2.3.0 Microfocus Privileged User Manager 2.3.1

1 EDB exploit

5.5

CVSSv3

IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 116171.

Ibm Security Privileged Identity Manager 2.0.2 Ibm Security Privileged Identity Manager 2.1

6.5

CVSSv3

IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user.

Ibm Security Privileged Identity Manager 2.1 Ibm Security Privileged Identity Manager 2.0.2

6.3

CVSSv3

IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically executed by the server.

Ibm Security Privileged Identity Manager 2.1 Ibm Security Privileged Identity Manager 2.0.2

7.5

CVSSv3

A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote malicious users to hijack user sessions with a specially crafted request.

Broadcom Privileged Access Manager

3.3

CVSSv3

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 144408.

Ibm Security Privileged Identity Manager 2.1.1

7.5

CVSSv3

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong passwords by default, which makes it easier for malicious users to compromise user accounts. IBM X-Force ID: 145236.

Ibm Security Privileged Identity Manager 2.1.1

8.8

CVSSv3

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site request forgery which could allow an malicious user to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 144348.

Ibm Security Privileged Identity Manager 2.1.1

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook