Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privilege escalation.
CVSS Information
N/A
Vulnerability Type
带着不必要的权限执行
Vulnerability Title
Imperva SecureSphere 权限许可和访问控制问题漏洞
Vulnerability Description
Imperva SecureSphere是美国Imperva公司的一套高性能、集中式数据安全防护管理产品。该产品提供对不同的SecureSphere产品进行统一审核、报告和记录、可视化的安全状态和实时监控事件、管理和分配策略等功能。 Imperva SecureSphere 13.0版本、12.0版本和11.5版本中存在安全漏洞。攻击者可利用该漏洞向管理员用户的authorized_keys添加任意ssh密钥，从而以管理员的身份登录。
CVSS Information
N/A
Vulnerability Type
N/A