CVE-2018-16660 A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated access to execute arbitrary OS commands on a vulnerable installat...
HighCVSS 8.8
EPSS 17.4%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
A command injection vulnerability in PWS in Imperva SecureSphere 13.0.0.10 and 13.1.0.10 Gateway allows an attacker with authenticated access to execute arbitrary OS commands on a vulnerable installation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| imperva securesphere | = 13.0.10 | No fix listed |
| imperva securesphere | = 13.1.10 | No fix listed |
| imperva securesphere | = 13.2.10 | No fix listed |
References
- www.exploit-db.com exploit third-party-advisory vdb-entry
- www.imperva.com product vendor-advisory