CVE-2013-4094
CVSS V2 Medium 6.5
CVSS V3 None
Description
The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to upload executable files via the (1) private_key or (2) public_key parameter in a T/keyManagement request to plain/settings.html, as demonstrated by uploading a Linux ELF file and a shell script.
Overview
- CVE ID
- CVE-2013-4094
- Assigner
- cve@mitre.org
- Vulnerability Status
- Analyzed
- Published Version
- 2013-06-28T23:55:11
- Last Modified Date
- 2013-07-01T16:50:38
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:imperva:securesphere:9.0.0.5:*:*:*:*:*:*:* | 1 | OR |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:N/AC:L/Au:S/C:P/I:P/A:P
- Access Vector
- NETWORK
- Access Compatibility
- LOW
- Authentication
- SINGLE
- Confidentiality Impact
- PARTIAL
- Integrity Impact
- PARTIAL
- Availability Impact
- PARTIAL
- Base Score
- 6.5
- Severity
- MEDIUM
- Exploitability Score
- 8
- Impact Score
- 6.4
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2013-4094 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4094 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-05-10 10:44:32 | Added to TrackCVE | |||
| 2022-12-01 18:53:39 | 2013-06-28T23:55Z | 2013-06-28T23:55:11 | CVE Published Date | updated |
| 2022-12-01 18:53:39 | 2013-07-01T16:50:38 | CVE Modified Date | updated | |
| 2022-12-01 18:53:39 | Analyzed | Vulnerability Status | updated |