CVE-2018-16660 - A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated access to execute arbitrary OS commands on a vulnerable installation

Back Back to CVE browser

HIGH

A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated access to execute arbitrary OS commands on a vulnerable installation

Published Apr 25, 2019

8.8

HIGH

CVSS 3.0

EPSS 17.42%

Description

A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated access to execute arbitrary OS commands on a vulnerable installation.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-8462
Advisory
https://www.exploit-db.com/exploits/45542/
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.imperva.com/products/securesphere/web-application-firewall/
x_refsource_MISCProductVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-8462		Advisory
https://www.exploit-db.com/exploits/45542/		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.imperva.com/products/securesphere/web-application-firewall/		x_refsource_MISCProductVendor Advisory