Imperva discloses a critical vulnerability (CVSS 7.7) in Perforce’s P4 protocol affecting client versions before Helix Core 2025.2 Patch 2. The flaw stems from missing server response validation on the client, letting attackers inject malicious instructions into configuration files via the P4LOGINSSO environment variable to achieve arbitrary code execution.
Discovery
Learnings
- auto_storiesStories
- categoryAreas
- helpFAQ
- forumConversations
- descriptionPapers
- mailNewsletters
- video_libraryVideos
- timelineTimeline
Guidance
- codeTechnology of APIs
- business_centerBusiness of APIs
- campaignEvangelism of APIs
- gavelGovernance of APIs
- historyHistory of APIs
- account_balancePolitics of APIs
Toolbox
- domainProviders
- apiAPIs
- cloudSolutions
- buildTools
- verifiedStandards
- gavelRegulations
- horizontal_ruleHeaders
- layersOverlays
- extensionExtensions
- schemaSchema
- policyPolicies
- ruleRules