CVE-2012-5931: Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Priv...

Security readout for executives and security teams

NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allowed an authenticated remote user to abuse log path configuration and create or overwrite files outside the intended directory. For a privileged access product, that can affect integrity and operations even without public evidence of unauthenticated or active exploitation. Exposure is limited to organizations still running NetIQ Privileged User Manager 2.3.x versions earlier than 2.3.1 HF2, especially where authenticated users can reach the affected management/service interface. Prioritize remediation if this product remains deployed. The issue affects a privileged user management platform and allows arbitrary file overwrite by authenticated users, but evidence provided does not show active exploitation. Mitigation focus: Upgrade NetIQ Privileged User Manager to 2.3.1 HF2 or later vendor-supported guidance.; Review NetIQ KB 7011385 and Novell download guidance for the applicable hotfix.; Restrict access to PUM administrative interfaces to trusted administrators and management networks..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.