PT-2009-1581 · Ibm · Ibm Workplace Web Content Management+1

Published 2009-02-10 · Updated 2009-08-08 · CVE-2008-6106

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Workplace for Business Controls and Reporting versions 2.x IBM Workplace Web Content Management versions 6.x

Description A cross-site request forgery (CSRF) issue has been identified, allowing for remote attack vectors. The impact of this issue is currently unknown.

Recommendations For IBM Workplace for Business Controls and Reporting versions 2.x, update to a version that addresses this issue. For IBM Workplace Web Content Management versions 6.x, update to a version that addresses this issue. As a temporary workaround, consider implementing anti-CSRF measures, such as token-based validation, to mitigate the risk of exploitation.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2008-6106

Affected Products

Ibm Workplace Web Content Management

Ibm Workplace For Business Controls/Reporting

References · 4

• http://secunia.com/advisories/30433 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg1PJ33180 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6106 · Security Note
• http://securitytracker.com/id?1020236 · Note