CVE-2018-10865

2021-05-2618:03:11

CWE-862

redhat

www.cve.org

0.001 Low

EPSS

Percentile

37.4%

JSON

It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to call a “restart” RPC method on any host accessible by the system, even if not belonging to him.

CNA Affected

[
  {
    "product": "redhat-certification",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "redhat-certification 7"
      }
    ]
  }
]

References

access.redhat.com/security/cve/CVE-2018-10865

bugzilla.redhat.com/show_bug.cgi?id=1593631

0.001 Low

EPSS

Percentile

37.4%

JSON

Related for CVELIST:CVE-2018-10865