CVE-2018-5413 - CVE House

Status published High CVE-2018-5413

Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged...

8.8 CVSS

Vulnerability Description

Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privilege escalation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-5413

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.exploit-db.com/exploits/45130

More from Imperva

View All →

CVE-2018-5412

Imperva SecureSphere running v12.0.0.50 is vulnerable to local arbitrary code...

High 7.8

CVE-2018-5403

Imperva SecureSphere gateway (GW) running v13, for both pre-First Time...

High 8.1

Affected Vendor

Imperva

View all reports →

Affected Software

SecureSphere

Vulnerable Versions:

unspecified

Timeline

Official Publish: January 10th, 2019

Last Modified: August 5th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-250

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1548 Abuse Elevation Control Mechanism

Defense Evasion

T1078 Valid Accounts

Persistence

T1574 Hijack Execution Flow