NVD

Id
39764  
Name
CVE-2013-4091  
Description
The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for the password (aka j_password) field on the secsphLogin.jsp login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-06-28  
Modified Date
2013-07-01  
Seq
2013-4091  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202272 39764 CVE-2013-4091 http://packetstormsecurity.com/files/121861/Imperva-SecureSphere-Operations-Manager-Command-Execution.html  View
202273 39764 CVE-2013-4091 http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21584 JVNDB-2013-003159 Imperva SecureSphere の SecureSphere Operations Manager Management Server におけるアクセス権を取得される脆弱性 Imperva SecureSphere の SecureSphere Operations Manager (SOM) Management Server は、secsphLogin.jsp ログインページの password (別名 j_password) フィールドに対して、autocomplete 属性を無効することができないため、アクセス権を取得される脆弱性が存在します。 CVE-2013-4091 64033 CVE-2013-4091 39764 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003159.html 2013-06-02 2013-07-02 View