Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote authenticated users to create or overwrite arbitrary files via directory traversal sequences in a log pathname.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetIQ Privileged User Manager 路径遍历漏洞
Vulnerability Description
NetIQ Privileged User Manager是安全访问UNIX、Linux和Windows系统的解决方案。 NetIQ Privileged User Manager 2.3.1 HF2之前的2.3.x版本中的unifid.exe中的regclnt.dll中的set_log_config函数中存在目录遍历漏洞。通过日志路径名中的目录遍历序列，远程认证攻击者利用该漏洞创建或重写任意文件。
CVSS Information
N/A
Vulnerability Type
N/A