CVE-2008-2139: Rpath Appliance Platform Agent

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account.

Affected products

• Rpath Appliance Platform Agent: version 2 only; version 3 only

Published 2008-05-12. Last modified 2026-06-16.