Rpath Appliance Platform Agent vulnerabilities

2 vulnerabilities

Known vulnerabilities in Rpath Appliance Platform Agent, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2008-2139rpathappliance_platform_agent
EPSS score
0.36%
The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account.2.6CVE-2008-2140rpathappliance_platform_agent
EPSS score
0.41%
Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3 allows remote attackers to reset the root password as the administrator via a crafted URL.