PT-2008-3030 · Imperva · Imperva Securesphere Mx Management Server

Publicado 2008-03-24 · Atualizado 2017-08-08 · CVE-2008-1463

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere MX Management Server version 5.0

Description A cross-site scripting (XSS) issue exists in the management GUI, allowing remote attackers to inject arbitrary web script or HTML via an invalid or prohibited request to a web server protected by SecureSphere. This triggers injection into the corrective action section of an alert page.

Recommendations For Imperva SecureSphere MX Management Server version 5.0, consider disabling access to the management GUI until a fix is available to prevent potential exploitation of the XSS issue. Restrict access to the web server protected by SecureSphere to minimize the risk of arbitrary web script or HTML injection.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-1463

Produtos afetados

Imperva Securesphere Mx Management Server

Referências · 7

• 🔥 http://securityfocus.com/bid/28279 · Exploit
• 🔥 https://exploit-db.com/exploits/31413 · Exploit
• http://secunia.com/advisories/29439 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41359 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1463 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1463 · Nota de Segurança
• http://imperva.com/go/secadv/20080318 · Nota