CVE

Id
32256  
CVE No.
CVE-2008-2139  
Status
Candidate  
Description
The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account.  
Phase
Assigned (20080512)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
348416 32256 CVE-2008-2139 CONFIRM:http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148  View
348417 32256 CVE-2008-2139 XF:rootpw-rpath-appliance-csrf(42393)  View
348418 32256 CVE-2008-2139 URL:http://xforce.iss.net/xforce/xfdb/42393  View
348419 32256 CVE-2008-2139 XF:rootpw-rpath-appliance-privilege-escalation(42394)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49101 JVNDB-2008-004411 Microsoft OWA における Web ブラウザ に重要な情報をキャッシュさせる脆弱性 Microsoft Outlook Web Access (OWA) の不特定のバージョンは、no-store の代わりに Cache-Control: no-cache HTTP ディレクティブを使用するため、RFC-2616 に準拠した Web ブラウザに重要な情報をキャッシュさせる脆弱性が存在します。 CVE-2008-2143 32256 1.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004411.html  View