PT-2009-1581 · Ibm · Ibm Workplace Web Content Management+1

Publicado 2009-02-10 · Atualizado 2009-08-08 · CVE-2008-6106

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Workplace for Business Controls and Reporting versions 2.x IBM Workplace Web Content Management versions 6.x

Description A cross-site request forgery (CSRF) issue has been identified, allowing for remote attack vectors. The impact of this issue is currently unknown.

Recommendations For IBM Workplace for Business Controls and Reporting versions 2.x, update to a version that addresses this issue. For IBM Workplace Web Content Management versions 6.x, update to a version that addresses this issue. As a temporary workaround, consider implementing anti-CSRF measures, such as token-based validation, to mitigate the risk of exploitation.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2008-6106

Produtos afetados

Ibm Workplace Web Content Management

Ibm Workplace For Business Controls/Reporting

Referências · 4

• http://secunia.com/advisories/30433 · Aviso do Fabricante
• http://www-1.ibm.com/support/docview.wss?uid=swg1PJ33180 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-6106 · Nota de Segurança
• http://securitytracker.com/id?1020236 · Nota