CVE-2018-5403
HIGHImperva SecureSphere v13 - Remote Code Execution via Web Access Management Interface
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2018-5403. PoCs published by rsp3ar.
AI-analyzed exploit summary This exploit demonstrates a command injection vulnerability in Imperva SecureSphere 13's PWS component, allowing unauthenticated or authenticated remote code execution via crafted parameters in the 'impcli' endpoint. The PoC uses base64-encoded commands injected into the 'installer-address' parameter.
Description
Imperva SecureSphere gateway (GW) running v13, for both pre-First Time Login or post-First Time Login (FTL), if the attacker knows the basic authentication passwords, the GW may be vulnerable to RCE through specially crafted requests, from the web access management interface.
Exploits (1)
This exploit demonstrates a command injection vulnerability in Imperva SecureSphere 13's PWS component, allowing unauthenticated or authenticated remote code execution via crafted parameters in the 'impcli' endpoint. The PoC uses base64-encoded commands injected into the 'installer-address' parameter.
References (1)
Scores
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H