PT-2008-3030 · Imperva · Imperva Securesphere Mx Management Server

Published 2008-03-24 · Updated 2017-08-08 · CVE-2008-1463

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere MX Management Server version 5.0

Description A cross-site scripting (XSS) issue exists in the management GUI, allowing remote attackers to inject arbitrary web script or HTML via an invalid or prohibited request to a web server protected by SecureSphere. This triggers injection into the corrective action section of an alert page.

Recommendations For Imperva SecureSphere MX Management Server version 5.0, consider disabling access to the management GUI until a fix is available to prevent potential exploitation of the XSS issue. Restrict access to the web server protected by SecureSphere to minimize the risk of arbitrary web script or HTML injection.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-1463

Affected Products

Imperva Securesphere Mx Management Server

References · 7

• 🔥 http://securityfocus.com/bid/28279 · Exploit
• 🔥 https://exploit-db.com/exploits/31413 · Exploit
• http://secunia.com/advisories/29439 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1463 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41359 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1463 · Note
• http://imperva.com/go/secadv/20080318 · Note