CVE-2018-10869

redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by the user running httpd.
References
Configurations

Configuration 1

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:certification:-:*:*:*:*:*:*:*

Information

Published : 2018-07-19 10:29

Updated : 2023-02-13 04:51


NVD link : CVE-2018-10869

Mitre link : CVE-2018-10869

Products Affected
CWE