CVE-2008-2140 Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL...
LowCVSS 2.6
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rpath appliance platform agent | = 2 | No fix listed |
| rpath appliance platform agent | = 3 | No fix listed |