PT-2008-6077 · Planetluc · Planetluc Rateme

Published 2008-11-04 · Updated 2017-08-08 · CVE-2008-4899

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Planetluc RateMe version 1.3.3

Description A cross-site request forgery issue allows remote attackers to perform unauthorized actions as other users. The exact vectors used for the attack are not specified.

Recommendations For Planetluc RateMe version 1.3.3, consider implementing anti-CSRF measures, such as token-based validation, to prevent unauthorized actions. As a temporary workaround, restrict access to sensitive features that could be exploited through CSRF attacks until a patch is available.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2008-4899

Affected Products

Planetluc Rateme

References · 4

• http://secunia.com/advisories/32511 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4899 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46201 · Note
• http://holisticinfosec.org/content/view/85/45 · Note