Arbitrary OS Command Execution in Python CGI Scripts in Imperva SecureSphere

CVE-2018-19646

The Python CGI scripts in PWS in Imperva SecureSphere 13.0.10, 13.1.10, and 13.2.10 allow remote attackers to execute arbitrary OS commands because command-line arguments are mishandled.

Learn more about our Web Application Penetration Testing UK.