Lucene search
Redhat.comRH:CVE-2018-10867HistoryJun 22, 2018 - 9:19 a.m.
CVE-2018-10867
2018-06-2209:19:02
redhat.com
access.redhat.com
17
0.002 Low
EPSS
Percentile
57.4%
It has been discovered that redhat-certification does not restrict file access in the /update/results page. A remote attacker could use this vulnerability to remove any file accessible by the user which is running httpd.
Mitigation
If SELinux is enabled, it will restrict the number of files accessible by the httpd process.
Related
cvelist
cvelist
CVE-2018-10867
2021-05-26 18:03:20
nvd
nvd
CVE-2018-10867
2021-05-26 19:15:08
cve
cve
CVE-2018-10867
2021-05-26 19:15:08
prion
prion
Code injection
2021-05-26 19:15:00