PT-2013-4845

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere version 9.0.0.5 Description The issue allows context-dependent attackers to obtain sensitive information by leveraging the presence of a session ID in the jsessionid field to "secsphLogin.jsp" or credentials in the j...

PT-2013-4844

Name of the Vulnerable Software and Affected Versions Imperva SecureSphere version 9.0.0.5 Description The issue concerns the SecureSphere Operations Manager SOM Management Server, where the login page secsphLogin.jsp lacks an autocomplete attribute for the j password field. This omission makes i...

CVE-2013-4091: Undefined Security Weakness

The SecureSphere Operations Manager SOM Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for the password aka jpassword field on the secsphLogin.jsp login page, which makes it easier for remote attackers to obtain access by leveraging an unattended...