CVE-2008-2140

rPath Appliance Platform Agent 2 and 3 - Cross-Site Request Forgery via Root Password Reset

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_confirm
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42393

Scores

EPSS 0.0041
EPSS Percentile 33.2%

Details

CWE
CWE-352
Status published
Products (2)
rpath/appliance_platform_agent 2
rpath/appliance_platform_agent 3
Published May 12, 2008
Tracked Since Feb 18, 2026