CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Permissions Privileges and Access Controls
Summary: the rootpw plugin in rpath appliance platform agent 2 and 3 does not re-validate requests from a browser with a valid administrator session, including requests to change the password, which makes it easier for physically proximate attackers to gain privileges and maintain control over the administrator account.
Access Authentication: SINGLE
Access Complexity: HIGH
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2008-05-12
Last Modified Date: 2017-08-08