CVE-2012-6348: Centrify Deployment Manager

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Centrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows local users to (1) overwrite arbitrary files via a symlink attack on the adcheckDMoutput temporary file, or (2) overwrite arbitrary files and consequently gain privileges via a symlink attack on the centrify.cmd.0 temporary file.

Affected products

• Centrify Centrify Deployment Manager: version 2.1.0.283 only
• Centrify Centrify Suite: up to and including 2012

Published 2013-01-04. Last modified 2026-06-16.