CVE-2008-1106

no score yetEPSS 0.8%

The management interface in Akamai Client (formerly Red Swoosh) 3322 and earlier allows remote attackers to bypass authentication via an HTTP request that contains (1) no Referer header, or (2) a spoofed Referer header that matches an approved domain, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and force the client to download and execute arbitrary files.

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-352
Published: 2008-06-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

akamai_technologies:client
red_swoosh:client

References

http://secunia.com/advisories/30135
http://secunia.com/secunia_research/2008-19/advisory/
http://securityreason.com/securityalert/3930
http://www.securityfocus.com/archive/1/493169/100/0/threaded
http://www.securityfocus.com/archive/1/493170/100/0/threaded

Check your stack JSON