Improper input validation in Imperva Securesphere
CVE-2013-4094
The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to upload executable files via the (1) private_key or (2) public_key parameter in a T/keyManagement request to plain/settings.html, as demonstrated by uploading a Linux ELF file and a shell script.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.056 (92.1th percentile) — read the EPSS interpretation.
Affected products
- Imperva Securesphere — versions 9.0.0.5
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)