NVD

Id
2073  
Name
CVE-2008-2139  
Description
The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
2.5  
CVSS Vector
(AV:A/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-05-12  
Modified Date
2008-09-05  
Seq
2008-2139  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
13314 2073 CVE-2008-2139 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148  View
13315 2073 CVE-2008-2139 rootpw-rpath-appliance-csrf(42393)  View
13316 2073 CVE-2008-2139 rootpw-rpath-appliance-privilege-escalation(42394)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50460 JVNDB-2008-005770 rPath Appliance Platform Agent の rootpw プラグインにおける権限を取得される脆弱性 rPath Appliance Platform Agent の rootpw プラグインは、パスワード変更のリクエストを含む有効な管理者セッションを伴うブラウザからのリクエストを再検証しないため、権限を取得される、管理者アカウントの制御を維持される脆弱性が存在します。 CVE-2008-2139 32252 CVE-2008-2139 2073 6.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005770.html 2008-04-25 2012-12-20 View