PT-2013-4847 · Imperva · Imperva Securesphere

Publicado 2013-06-28 · Atualizado 2013-07-01 · CVE-2013-4094

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere version 9.0.0.5

Description The issue allows remote authenticated users to upload executable files. This can be achieved by using the private key or public key parameter in a T/keyManagement request to the "plain/settings.html" endpoint. For example, it is possible to upload a Linux ELF file and a shell script.

Recommendations For Imperva SecureSphere version 9.0.0.5, consider restricting access to the T/keyManagement request to prevent unauthorized file uploads until a fix is available. As a temporary workaround, restrict the use of the private key and public key parameters in the T/keyManagement request to minimize the risk of exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-4094

Produtos afetados

Imperva Securesphere

Referências · 5

• 🔥 https://exploit-db.com/exploits/25977 · Exploit
• http://digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt · Nota
• http://packetstormsecurity.com/files/121861/Imperva-SecureSphere-Operations-Manager-Command-Execution.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4094 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-4094 · Nota de Segurança