medium6.5
CVE-2008-2139
The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests…
Impact
The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rpath | Appliance Platform Agent | Versions 2, 3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42393
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42394
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42393
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42394