CVE-2013-4091
Last modified
CVE-2013-4091 is a vulnerability of currently unknown severity. The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for the password (aka j_password) field on the secsphLogin.jsp login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.. EPSS estimates a 5.59% chance of exploitation in the next 30 days.
Description
The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for the password (aka j_password) field on the secsphLogin.jsp login page, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Imperva | Securesphere | 9.0.0.5 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-4091?
How severe is CVE-2013-4091?
How do I fix CVE-2013-4091?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-4080The dissect_r3_upstreamcommand_queryconfig function in epan/…
- CVE-2013-4081The http_payload_subdissector function in epan/dissectors/pa…
- CVE-2013-4082The vwr_read function in wiretap/vwr.c in the Ixia IxVeriWav…
- CVE-2013-4083The dissect_pft function in epan/dissectors/packet-dcp-etsi.…
- CVE-2013-4088Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request …6.5
- CVE-2013-4090Varnish HTTP cache before 3.0.4: ACL bug7.5
- CVE-2013-4092The SecureSphere Operations Manager (SOM) Management Server …
- CVE-2013-4093The SecureSphere Operations Manager (SOM) Management Server …
- CVE-2013-4094The Key Management feature in the SecureSphere Operations Ma…
- CVE-2013-4095plain/actionsets.html in the SecureSphere Operations Manager…
- CVE-2013-4096ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication S…
- CVE-2013-4097ServerAdmin/TestDRConnection.jsp in DS3 Authentication Serve…
Are you affected by CVE-2013-4091?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST