CVE-2013-4092 - CVE House
Back to Database
Status published Medium CVE-2013-4092

The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere...

Vulnerability Description

The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent attackers to obtain sensitive information by leveraging the presence of (1) a session ID in the jsessionid field to secsphLogin.jsp or (2) credentials in the j_password parameter to j_acegi_security_check, and reading (a) web-server access logs, (b) web-server Referer logs, or (c) the browser history.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4092

Credits & Attribution

No credits recorded in the NVD database.

References

More from imperva

View All →
CVE-2021-45468
Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated...
Critical 9.8
CVE-2018-19646
The Python CGI scripts in PWS in Imperva SecureSphere 13.0.10,...
Critical 9.8
CVE-2018-16660
A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10...
High 8.8
CVE-2013-4095
plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in...
Medium 6.5
CVE-2013-4094
The Key Management feature in the SecureSphere Operations Manager (SOM)...
Medium 6.5

Affected Vendor

Affected Software

securesphere
Vulnerable Versions:
9.0.0.5

Timeline

Official Publish: June 28th, 2013
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.