Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent attackers to obtain sensitive information by leveraging the presence of (1) a session ID in the jsessionid field to secsphLogin.jsp or (2) credentials in the j_password parameter to j_acegi_security_check, and reading (a) web-server access logs, (b) web-server Referer logs, or (c) the browser history.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Imperva SecureSphere Operations Manager 信息泄露漏洞
Vulnerability Description
SecureSphere Operations Manager（SOM）是美国Imperva公司的一套多域管理解决方案，该解决方案主要用于提高当使用多个MX管理服务器来管理SecureSphere部署时的运营效率。SecureSphere是一套管理和报告框架平台，该平台提供物理和虚拟设备交付选择的功能，包含能将数据安全扩展到主机系统的服务器代理软件。 Imperva SecureSphere 9.0.0.5版本中的SecureSphere Operations Manager (SOM) Manageme
CVSS Information
N/A
Vulnerability Type
N/A