EUVD-2008-1115

Malware in sbrugna...

In-App Browsers and Akamai Client-Side Protection & Compliance

Learn how Akamai's Client-Side Protection & Compliance tracks In-App browser injections to make sure sensitive information is kept safe and private...

Akamai Enterprise Application Access Client code-related vulnerabilities

Akamai Enterprise Application Access Client Akamai Eaa Client is an enterprise application access program from Akamai, Inc. It is used to provide fast, secure access. A security vulnerability exists in Akamai EAA, which stems from an unquoted path that could allow an attacker to hijack the...

CVE-2008-1106

The management interface in Akamai Client formerly Red Swoosh 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains 1 no Referer header, or 2 a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site...

Cross site request forgery (csrf)

The management interface in Akamai Client formerly Red Swoosh 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains 1 no Referer header, or 2 a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site...

CVE-2008-1106

The management interface in Akamai Client formerly Red Swoosh 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains 1 no Referer header, or 2 a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site...

CVE-2008-1106

The CVE-2008-1106 issue affects Akamai Client Software (formerly Red Swoosh) up to version 3322. The management web server on loopback (9421/TCP) authenticates based on the HTTP Referer header, allowingCSRF via requests with no Referer or spoofed Referer to approved domains, enabling remote execu...

CVE-2008-1106: Improper Authentication

The management interface in Akamai Client formerly Red Swoosh 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains 1 no Referer header, or 2 a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site...