CVE-2012-5930: The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3...

Security readout for executives and security teams

This flaw lets an unauthenticated remote attacker change administrative account passwords in affected NetIQ Privileged User Manager versions. For a business, that means potential loss of privileged access control and account takeover if the vulnerable service is reachable. Exposure is limited to organizations running NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2, especially where the affected service is reachable over a network. The bundle does not provide CPEs or deployment prevalence. Treat as urgent for any remaining affected deployment. The impact is direct administrative password control without authentication, which can undermine privileged access management itself. Mitigation focus: Identify NetIQ Privileged User Manager 2.3.x deployments and exact hotfix level.; Apply NetIQ Privileged User Manager 2.3.1 HF2 or later vendor-supported guidance.; Restrict network access to affected management services until remediation is complete..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.