CVE-2012-6348: Centrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows local users t...

Security readout for executives and security teams

CVE-2012-6348 is a local privilege-escalation flaw in Centrify Deployment Manager 2.1.0.283, distributed with Centrify Suite before 2012.5. A user already on the system could abuse unsafe temporary file handling to overwrite files and potentially gain higher privileges. Exposure is most likely on legacy systems running Centrify Suite before 2012.5 with Deployment Manager 2.1.0.283 present. The attack is local, so risk depends on whether untrusted or low-privileged users can access affected hosts. Prioritize remediation if affected Centrify components remain on shared Unix or Linux administration systems. The business risk is unauthorized privilege escalation by an existing local user, especially on servers used for identity, directory, or administrative deployment tasks. Mitigation focus: Inventory hosts for Centrify Suite before 2012.5 and Deployment Manager 2.1.0.283.; Check Centrify or vendor guidance for fixed versions and upgrade direction.; Restrict local shell access to affected systems until remediation is complete..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.