CVE-2008-2139

The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account.

🔗 References (6)

• cve@mitrehttp://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/42393
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/42394
• af854a3a-2127-422b-91ae-364da2661108http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/42393
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/42394