CVE-2018-5403

Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker knows the basic authentication passwords, the GW may be vulnerable to RCE through specially crafted requests, from the web access management interface.

Score

CVSS 3.0 8.1 High

Status

Modified - cret@cert.org

Published

2019-01-10

Last modified

2024-08-05

Weaknesses

CWE-287, CWE-77

Affected products

• Securesphere (Imperva)

References

• https://www.exploit-db.com/exploits/45542