CVE-2008-1106 describes a cross-site request forgery (CSRF) vulnerability in the management interface of Akamai Client (formerly Red Swoosh) versions 3322 and earlier. This flaw allows remote attackers to bypass authentication by manipulating or omitting the Referer header in HTTP requests. The vulnerability has a CVSS score of 7.1, indicating high severity. Its attack vector is network-based with medium attack complexity, and it primarily impacts integrity by allowing attackers to force the client to download and execute arbitrary files. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3322CPE matchmatch criteria | cpe:2.3:a:akamai_technologies:client:*:*:*:*:*:*:*:* | ||
<= 3322CPE matchmatch criteria | cpe:2.3:a:red_swoosh:client:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:N/I:C/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.