CVE-2008-2139

CVE-2008-2139 describes a privilege escalation vulnerability in the rootpw plugin of rPath Appliance Platform Agent versions 2 and 3. This flaw allows physically proximate attackers, who have already authenticated as an administrator, to maintain control over the administrator account by changing the password without re-validation. With a CVSS score of 6.5 (Medium), the attack requires authenticated access and high attack complexity, but can lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.