PT-2010-3027 · Imperva · Imperva Securesphere Web Application Firewall+1

Published 2010-04-15 · Updated 2018-10-10 · CVE-2010-1329

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere Web Application Firewall and Database Firewall versions 5.0.0.5082 through 7.0.0.7078

Description The issue allows remote attackers to bypass intrusion-prevention functionality. This can be achieved by sending a request with an appended long string that contains an unspecified manipulation.

Recommendations For versions 5.0.0.5082 through 7.0.0.7078, consider implementing additional security measures to detect and prevent suspicious requests until a fix is available. As a temporary workaround, restrict access to sensitive areas of the web application to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2010-1329

Affected Products

Imperva Securesphere Database Firewall

Imperva Securesphere Web Application Firewall

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-1329 · Security Note
• http://imperva.com/resources/adc/adc_advisories_response_clearskies.html · Vendor Advisory
• http://securityfocus.com/bid/39472 · Note
• http://clearskies.net/documents/css-advisory-css1001-imperva.php · Note
• http://securityfocus.com/archive/1/510709/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1329 · Note