PT-2019-10970
CVE-2018-5413
·
Published
2019-01-10
·
Updated
2019-10-09
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Imperva SecureSphere versions 11.5 through 13.0
Description:
The issue allows low-privileged users to add SSH login keys to the admin user, resulting in privilege escalation.
Recommendations:
For Imperva SecureSphere versions 11.5 through 13.0, update to a version that contains a fix for this issue to prevent low-privileged users from adding SSH login keys to the admin user.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾