CVE-2013-4093
Imperva SecureSphere 9.0.0.5 - Information Disclosure via Direct Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-4093.
AI-analyzed exploit summary This is a detailed technical advisory describing multiple vulnerabilities in Imperva SecureSphere Operations Manager, including command execution, file upload, and information disclosure issues. It provides specific HTTP request examples and technical details but does not include functional exploit code.
Description
The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain sensitive information via (1) a direct request to dwr/call/plaincall/AsyncOperationsContainer.getOperationState.dwr, which reveals the installation path in the s0.filePath field, or (2) a T/keyManagement request to plain/settings.html, which reveals a temporary path in an error message.
Exploits (1)
This is a detailed technical advisory describing multiple vulnerabilities in Imperva SecureSphere Operations Manager, including command execution, file upload, and information disclosure issues. It provides specific HTTP request examples and technical details but does not include functional exploit code.