CVE-2012-5930
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 7.4%
from disclosure to weapon0 days
Published on NVDDec 24
1st PoCNov 15
exploitation probability
7.4%top 6% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does not require authentication for the modifyAccounts method, which allows remote attackers to change the passwords of administrative accounts via a crafted application/x-amf request.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/22737⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.