CVE-2008-2139 The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it e...
MediumCVSS 6.5
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rpath appliance platform agent | = 2 | No fix listed |
| rpath appliance platform agent | = 3 | No fix listed |