PT-2008-6077 · Planetluc · Planetluc Rateme

Publicado 2008-11-04 · Atualizado 2017-08-08 · CVE-2008-4899

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Planetluc RateMe version 1.3.3

Description A cross-site request forgery issue allows remote attackers to perform unauthorized actions as other users. The exact vectors used for the attack are not specified.

Recommendations For Planetluc RateMe version 1.3.3, consider implementing anti-CSRF measures, such as token-based validation, to prevent unauthorized actions. As a temporary workaround, restrict access to sensitive features that could be exploited through CSRF attacks until a patch is available.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2008-4899

Produtos afetados

Planetluc Rateme

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/46201 · Nota
• http://holisticinfosec.org/content/view/85/45 · Nota
• http://secunia.com/advisories/32511 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-4899 · Nota de Segurança