PT-2019-9365

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere versions 13.0.0.10 and 13.1.0.10 Gateway Description A command injection issue in PWS allows an attacker with authenticated access to execute arbitrary OS commands on a vulnerable installation. Recommendations For Imperva...

PT-2019-10962

Name of the Vulnerable Software and Affected Versions: Imperva SecureSphere gateway version 13 Description: The issue allows for remote code execution RCE through specially crafted requests from the web access management interface, given that the attacker has knowledge of the basic authentication...

CVE-2018-5403: Improper Neutralization of Special Elements used in a Command

Imperva SecureSphere gateway GW running v13, for both pre-First Time Login or post-First Time Login FTL, if the attacker knows the basic authentication passwords, the GW may be vulnerable to RCE through specially crafted requests, from the web access management interface...