CVE-2018-10867

Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user...

Red Hat Certification 访问控制错误漏洞

Red Hat Certification is a software package from Red Hat USA. An access control error vulnerability exists in Redhat redhat-certification 7 that stems from the component not restricting access to files in the update results page. An attacker could exploit this vulnerability to delete any file...

CVE-2018-10867: Files or Directories Accessible to External Parties

Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user...

PT-2021-8693 · Red Hat +1 · Redhat-Certification +1

Name of the Vulnerable Software and Affected Versions: redhat-certification version 7 Description: The issue allows files to be accessible without restrictions from the "/update/results" page, enabling an attacker to remove any file accessible by the apached user. A remote attacker could exploit...