RETIRED: Imperva SecureSphere Operations Manager Multiple Security Vulnerabilities
BID:60286
Info
RETIRED: Imperva SecureSphere Operations Manager Multiple Security Vulnerabilities
| Bugtraq ID: | 60286 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 02 2013 12:00AM |
| Updated: | Jul 10 2013 05:02PM |
| Credit: | Pedro Andujar |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
RETIRED: Imperva SecureSphere Operations Manager Multiple Security Vulnerabilities
Imperva SecureSphere Operations Manager is prone to multiple security vulnerabilities including multiple information-disclosure issues, a file-upload issue, and a remote command-execution issue.
An attacker can exploit these issues to upload arbitrary files to the affected computer, gain access to sensitive information, or execute arbitrary commands in the context of the affected application. Other attacks may also be possible.
Imperva SecureSphere Operations Manager 9.0.0.5 is vulnerable; other versions may also be affected.
This BID is being retired. The following individual records exist to better document the issues:
61064 Imperva SecureSphere Operations Manager CVE-2013-4091 Information Disclosure Vulnerability
61066 Imperva SecureSphere Operations Manager Multiple Information Disclosure Vulnerabilities
61068 SecureSphere Operations Manager CVE-2013-4093 Multiple Information Disclosure Vulnerabilities
61065 Imperva SecureSphere Operations Manager CVE-2013-4094 Multiple Arbitrary File Upload Vulnerabilities
61067 Imperva SecureSphere Operations Manager CVE-2013-4095 Arbitrary Command Execution Vulnerability
Imperva SecureSphere Operations Manager is prone to multiple security vulnerabilities including multiple information-disclosure issues, a file-upload issue, and a remote command-execution issue.
An attacker can exploit these issues to upload arbitrary files to the affected computer, gain access to sensitive information, or execute arbitrary commands in the context of the affected application. Other attacks may also be possible.
Imperva SecureSphere Operations Manager 9.0.0.5 is vulnerable; other versions may also be affected.
This BID is being retired. The following individual records exist to better document the issues:
61064 Imperva SecureSphere Operations Manager CVE-2013-4091 Information Disclosure Vulnerability
61066 Imperva SecureSphere Operations Manager Multiple Information Disclosure Vulnerabilities
61068 SecureSphere Operations Manager CVE-2013-4093 Multiple Information Disclosure Vulnerabilities
61065 Imperva SecureSphere Operations Manager CVE-2013-4094 Multiple Arbitrary File Upload Vulnerabilities
61067 Imperva SecureSphere Operations Manager CVE-2013-4095 Arbitrary Command Execution Vulnerability
Exploit / POC
RETIRED: Imperva SecureSphere Operations Manager Multiple Security Vulnerabilities
Attackers can use a browser to exploit these issues.
The researcher who found these issues has created a proof-of-concept. Please see the references for information.
Attackers can use a browser to exploit these issues.
The researcher who found these issues has created a proof-of-concept. Please see the references for information.
Solution / Fix
RETIRED: Imperva SecureSphere Operations Manager Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RETIRED: Imperva SecureSphere Operations Manager Multiple Security Vulnerabilities
References:
References: