Privileged Account Manager 4.4 Patch 1 resolves a security vulnerability.
The documentation for this product is available on the NetIQ website in HTML and PDF formats. If you have suggestions for documentation improvements, click the comment icon on any page in the HTML version of the documentation posted at the Privileged Account Manager Documentation website.
Privileged Account Manager 4.4.0.1 resolves the authentication issue in the Privileged Account Manager User Console. (CVE-2024-12111)
Apply the fix to one of the following:
To apply the fix to PAM Linux manager:
Execute the following command to extract the zip file:
unzip pam_patch_4401.zip /tmp
To stop PAM service, execute the following command:
/etc/init.d/npum stop
Apply the patch files using following commands:
cd /opt/netiq/npum/service/local/auth/lib/
mv auth.so auth_44.so
cp <temp>/auth.so /opt/netiq/npum/service/local/auth/lib/
cd /opt/netiq/npum/bin
mv libspf_lib.so libspf_lib_44.so
cp <temp>/libspf_lib.so /opt/netiq/npum/bin/
To start PAM service, execute the following command:
/etc/init.d/npum start
Verify the applied patch in one of the following ways and ensue the version is 4.4.0-1:
Login to Administration Console using https://pam_ip_or_dns/pam URL and click About.
Check /opt/netiq/npum/unifid.log on PAM service startup.
To apply the fix to PAM Windows manager:
Extract the pam_patch_4401.zip file to a temporary folder.
Launch Services and stop NetIQ Privileged Account Manager.
Navigate to C:\Program Files\NetIQ\npum\service\local\auth\lib path.
Rename auth.dll to auth_44.dll.
Copy auth.dll from extracted zip to C:\Program Files\NetIQ\npum\service\local\auth\lib path.
Navigate to C:\Program Files\NetIQ\npum\bin path.
Rename spf_lib.dll to spf_lib_44.dll.
Copy spf_lib.dll from extracted zip to C:\Program Files\NetIQ\npum\bin path.
Launch Services and start NetIQ Privileged Account Manager.
To verify the applied patch, login to the Administration Console using https://pam_ip_or_dns/pam URL and click About. Ensure the version is 4.4.0-1.
Privileged Account Manager 4.4 Patch 1 does not have any known issues.
For specific product issues, contact Open Text Support at https://www.microfocus.com/support-and-services/
Additional technical information or advice is available from several sources:
Product documentation, Knowledge Base articles, and videos: https://www.microfocus.com/support-and-services/
The Open Text Community pages: https://www.microfocus.com/communities/
Copyright 2009 - 2024 Open Text
The only warranties for products and services of Open Text and its affiliates and licensors (“Open Text”) are as may be set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Open Text shall not be liable for technical or editorial errors or omissions contained herein. The information contained herein is subject to change without notice.
For additional information, such as certification-related notices and trademarks, see http://www.microfocus.com/about/legal/.