CVE-2018-5403

Опубликовано: 10 янв. 2019

Источник: nvd

CVSS3: 8.1

CVSS2: 6.8

EPSS Низкий

Описание

Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker knows the basic authentication passwords, the GW may be vulnerable to RCE through specially crafted requests, from the web access management interface.

Ссылки

https://www.exploit-db.com/exploits/45542
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/45542
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imperva:securesphere:13.0.10:*:*:*:*:*:*:*

cpe:2.3:a:imperva:securesphere:13.1.10:*:*:*:*:*:*:*

cpe:2.3:a:imperva:securesphere:13.2.10:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.0467

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-77

CWE-287

Связанные уязвимости

GHSA-qm3j-vvg8-52j9