PT-2013-4845 · Imperva · Imperva Securesphere

Published 2013-06-28 · Updated 2013-07-01 · CVE-2013-4092

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere version 9.0.0.5

Description The issue allows context-dependent attackers to obtain sensitive information by leveraging the presence of a session ID in the jsessionid field to "secsphLogin.jsp" or credentials in the j password parameter to "j acegi security check", and reading web-server access logs, web-server Referer logs, or the browser history.

Recommendations For Imperva SecureSphere version 9.0.0.5, consider restricting access to the "secsphLogin.jsp" and "j acegi security check" endpoints to minimize the risk of exploitation. As a temporary workaround, restrict access to web-server access logs and Referer logs, and clear browser history to reduce the exposure of sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2013-4092

Affected Products

Imperva Securesphere

References · 5

• 🔥 https://exploit-db.com/exploits/25977 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-4092 · Security Note
• http://digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt · Note
• http://packetstormsecurity.com/files/121861/Imperva-SecureSphere-Operations-Manager-Command-Execution.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4092 · Note