onyx --cves cve-2008-1106
CVE-2008-1106
- score
- <0.1
- cvss
- 7.1
- epss
- 0.8%
- published
- 2008-06-09
- kev added
- —
- first seen
Akamai Client (formerly Red Swoosh) 3322 and earlier contains an authentication bypass caused by missing or spoofed Referer headers in management interface requests, letting remote attackers conduct CSRF attacks and execute arbitrary files, exploit requires sending crafted HTTP requests.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 8
- http://www.securityfocus.com/archive/1/493169/100/0/threaded
- http://www.securityfocus.com/archive/1/493170/100/0/threaded
- http://www.securitytracker.com/id?1020208
- http://www.vupen.com/english/advisories/2008/1761/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42895
- http://secunia.com/advisories/30135
- http://secunia.com/secunia_research/2008-19/advisory/
- http://securityreason.com/securityalert/3930