NetSight
critical9.1

CVE-2018-10867

Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible b…

Impact

Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user.

Affected products

VendorProductAffected versions
RedhatCertification
Version 7.0

Weakness classification

References