2 matches found
CVE-2018-10867
Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user...
9.1CVSS5.8AI score0.01069EPSS
SaveExploits0References2
Code injection
Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user...
6.4CVSS9.1AI score0.01069EPSS
SaveExploits0References2Affected Software1
20