Vulnerabilities > Rpath > Appliance Platform Agent > Medium

DATE CVE VULNERABILITY TITLE RISK
2008-05-12 CVE-2008-2139 Permissions, Privileges, and Access Controls vulnerability in Rpath Appliance Platform Agent 2/3
The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account.
high complexity
rpath CWE-264
6.5