IQID:18143 Imperva SecureSphere 13 - Remote Command Execution S

IQID: 18143 - October 2018

PWS is a component in SecureSphere v13, which consists of Python CGIs to expose various cli utilities over https. The Python CGIs didn't properly sanitize user supplied command parameters, leading to command injection. The vulnerability could be exploited in following ways (depending on configuration status of SecureSphere): 1. Unauthenticated Remote Code Execution (Pre-FTL mode). When SecureSphere VM is provisioned without running 'ftl' utility to configured into SOM/MX/Gateway mode, The vulnerable endpoint could be reached without authentication. 2. Authenticated Remote Code Execution (Gateway mode). When SecureSphere VM is configured as gateway mode via 'ftl' utility, the vulnerable endpoint could be reached with valid agent registration credential for user 'imperva'.

A Full Description is available for this threat, please sign in for access to Full Description.

 

Attack Data

Attack Data is available for this threat, please sign in for access to Attack Data.

 

CVSS Information

CVSS Information is available for this threat, please sign in for access to CVSS Information.

 

Date

Date Information is available for this threat, please sign in for access to Date Information.