Unscored severity · published May 12, 2008
CVE-2008-2140
Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Appliance Platform Agent · Rpath
2; 3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2140
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2140
wiki.rpath.com
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0148
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42393
More from Appliance Platform Agent
–
CVE-2007-5962
Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows…
–
CVE-2008-2139
The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the…