CVE:CVE-2010-1329
CNNVD:CNNVD-201004-285
Web应用防火墙(Web Application Firewall，简称：WAF)为目前国际安全界的新兴产品，用以解决Web应用层出现的安全问题。
Imperva SecureSphere Web应用防火墙和数据库防火墙存在未明认证绕过漏洞。远程攻击者可以借助包含未明操作的附加的超长字符串的请求，绕过入侵防护功能。
solution:Upgrade imperva securesphere_web_application_firewall to a higher version than 5.0.0.5082,6.0.5.6230,6.0.5.6238,6.0.6.6274,6.0.6.6302,6.2.0.6442,6.2.0.6463,7.0.0.7061,6.0.4.6128,7.0.0.7078,and avoid the version 5.0.0.5082,6.0.5.6230,6.0.5.6238,6.0.6.6274,6.0.6.6302,6.2.0.6442,6.2.0.6463,7.0.0.7061,6.0.4.6128,7.0.0.7078; Upgrade imperva securesphere_database_firewall to a higher version than 5.0.0.5082,6.0.5.6230,6.0.5.6238,6.0.6.6274,6.0.6.6302,6.2.0.6442,6.2.0.6463,7.0.0.7061,6.0.4.6128,7.0.0.7078,and avoid the version 5.0.0.5082,6.0.5.6230,6.0.5.6238,6.0.6.6274,6.0.6.6302,6.2.0.6442,6.2.0.6463,7.0.0.7061,6.0.4.6128,7.0.0.7078