CVE-2008-2139 | BDVDB-2026-30575 Detail

Description#

The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/42394
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148
https://exchange.xforce.ibmcloud.com/vulnerabilities/42393

Exploit#

No public exploit known

History#

Version 12008-05-12Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.