CVE-2018-10866

2021-05-2618:03:16

CWE-862

redhat

www.cve.org

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.4%

JSON

It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to remove a “system” file, that is an xml file with host related information, not belonging to him.

CNA Affected

[
  {
    "product": "redhat-certification",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "redhat-certification 7"
      }
    ]
  }
]