6.5
CVE-2008-2139
- EPSS 0.1%
- Published 12.05.2008 17:20:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account.
Data is provided by the National Vulnerability Database (NVD)
Rpath ≫ Appliance Platform Agent Version2
Rpath ≫ Appliance Platform Agent Version3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.1% | 0.243 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.5 | 10 |
AV:A/AC:H/Au:S/C:C/I:C/A:C
|