appliance platform agent vulnerabilities and fixes

Recent CVEs affecting appliance platform agent, with upgrade or downgrade steps. 3 tracked.

Also searched as: applianceplatformagent.

appliance platform agent has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-05-22. Highest priority: CVE-2007-5962 (score 59/100).

• CVE-2008-2140 LOW 2.6 DOWNGRADE Cross-site request forgery (CSRF) vulnerability in the rootpw plugin in rPath Appliance Platform Agent 2 and 3
• CVE-2008-2139 MEDIUM 6.5 MITIGATE The rootpw plugin in rPath Appliance Platform Agent 2 and 3 does not re-validate requests from a browser with
• CVE-2007-5962 HIGH 7.1 MITIGATE MITIGATE Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedor

FAQ

How do I fix appliance platform agent vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is appliance platform agent being exploited right now?

None of the tracked appliance platform agent CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which appliance platform agent CVE should I patch first?

CVE-2007-5962 currently ranks highest (59/100): Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedor.

RSS feed for appliance platform agent · ← Back to latest CVEs