PT-2018-15027 · Imperva · Imperva Securesphere

Publicado 2018-11-28 · Atualizado 2019-02-04 · CVE-2018-19646

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere versions 13.0.10 through 13.2.10

Description The issue in Imperva SecureSphere allows remote attackers to execute arbitrary OS commands due to the mishandling of command-line arguments in the Python CGI scripts.

Recommendations For versions 13.0.10 through 13.2.10, update to a version that includes a fix for the mishandling of command-line arguments in Python CGI scripts.

Exploit

Correção

RCE

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2018-19646

Produtos afetados

Imperva Securesphere

Referências · 3

• 🔥 https://exploit-db.com/exploits/45542 · Exploit
• https://osv.dev/vulnerability/CVE-2018-19646 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-19646 · Nota de Segurança