Lucene search
Veracode Vulnerability DatabaseVERACODE:19451HistoryMay 16, 2019 - 3:10 a.m.
Information Disclosure
2019-05-1603:10:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.003 Low
EPSS
Percentile
68.7%
redhat-certification is vulnerable to information disclosure attacks. This is because redhat-certification does not properly restrict files that could be download through the download page. A remote attacker may download any file accessible by the user running httpd.
Related
redhatcve
redhatcve
CVE-2018-10869
2018-07-19 08:49:31
cvelist
cvelist
CVE-2018-10869
2018-07-19 22:00:00
nvd
nvd
CVE-2018-10869
2018-07-19 22:29:00
cve
cve
CVE-2018-10869
2018-07-19 22:29:00
prion
prion
Design/Logic Flaw
2018-07-19 22:29:00
nessus
nessus
RHEL 7 : redhat-certification (RHSA-2018:2373)
2018-08-16 00:00:00
redhat
redhat
(RHSA-2018:2373) Critical: redhat-certification security update
2018-08-09 17:12:00