Short Name |
HTTP:NOVELL-NETIQ-MOD-POLBYPAS1 |
---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
Novell NetIQ Privileged User Manager modifyAccounts Policy Bypass1 |
Release Date |
2015/10/07 |
Update Number |
2543 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
This signature detects a known policy bypass vulnerability in the Novell NetIQ Privileged User Manager. It is due to an access control weakness when handling a modifyAccounts request. A remote, unauthenticated attacker can exploit this vulnerability by sending a malicious request to a vulnerable server. Successful exploitation could result in code execution under the context of SYSTEM.