CVE-2013-4094
Imperva SecureSphere - Authenticated Arbitrary File Upload via Key Management Feature
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-4094.
AI-analyzed exploit summary This is a detailed technical advisory describing multiple vulnerabilities in Imperva SecureSphere Operations Manager, including command execution, file upload, and information disclosure issues. It provides HTTP request examples and technical details but does not include functional exploit code.
Description
The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to upload executable files via the (1) private_key or (2) public_key parameter in a T/keyManagement request to plain/settings.html, as demonstrated by uploading a Linux ELF file and a shell script.
Exploits (1)
This is a detailed technical advisory describing multiple vulnerabilities in Imperva SecureSphere Operations Manager, including command execution, file upload, and information disclosure issues. It provides HTTP request examples and technical details but does not include functional exploit code.