Home Page | Skip to Navigation | Skip to Content | Skip to Search | Skip to Footer

Novell NetIQ Privileged User Manager modifyAccounts Policy Bypass

Subscribe

Check Point Reference: CPAI-2012-1282
Date Published:
Severity:
Source: Secunia Advisory SA51291
Protection Provided by: Security Gateway
  • R75
Who is Vulnerable?
Novell Privileged User Manager 2.3.1
Vulnerability Description
A policy bypass vulnerability has been reported in Novell NetIQ Privileged User Manager. The vulnerability is due to an access control weakness when handling a modifyAccounts request. A remote, unauthenticated attacker could exploit this flaw by sending a malicious request to a vulnerable server. Successful exploitation could result in code execution under the context of SYSTEM.

Protection Overview
This protection will detect and block attempts to exploit this vulnerability.

To configure the defense, select your product from the list below and follow the related protection steps.