CVE-2013-4092
Imperva SecureSphere 9.0.0.5 - Information Disclosure via Session ID and Credential Logging
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-4092.
AI-analyzed exploit summary This advisory details multiple vulnerabilities in Imperva SecureSphere Operations Manager, including command execution, file upload, and information disclosure issues. It provides technical descriptions, HTTP request examples, and proof of concept payloads for exploitation.
Description
The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent attackers to obtain sensitive information by leveraging the presence of (1) a session ID in the jsessionid field to secsphLogin.jsp or (2) credentials in the j_password parameter to j_acegi_security_check, and reading (a) web-server access logs, (b) web-server Referer logs, or (c) the browser history.
Exploits (1)
This advisory details multiple vulnerabilities in Imperva SecureSphere Operations Manager, including command execution, file upload, and information disclosure issues. It provides technical descriptions, HTTP request examples, and proof of concept payloads for exploitation.