PT-2013-4845 · Imperva · Imperva Securesphere

Publicado 2013-06-28 · Atualizado 2013-07-01 · CVE-2013-4092

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere version 9.0.0.5

Description The issue allows context-dependent attackers to obtain sensitive information by leveraging the presence of a session ID in the jsessionid field to "secsphLogin.jsp" or credentials in the j password parameter to "j acegi security check", and reading web-server access logs, web-server Referer logs, or the browser history.

Recommendations For Imperva SecureSphere version 9.0.0.5, consider restricting access to the "secsphLogin.jsp" and "j acegi security check" endpoints to minimize the risk of exploitation. As a temporary workaround, restrict access to web-server access logs and Referer logs, and clear browser history to reduce the exposure of sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2013-4092

Produtos afetados

Imperva Securesphere

Referências · 5

• 🔥 https://exploit-db.com/exploits/25977 · Exploit
• http://digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt · Nota
• http://packetstormsecurity.com/files/121861/Imperva-SecureSphere-Operations-Manager-Command-Execution.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4092 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4092 · Nota de Segurança