CVE-2018-10863

State
Published
Severity
Not scored
Published
May 26, 2021
Updated
Aug 5, 2024
Reserved
May 9, 2018

Read the record on cve.org

Description

It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory, through the /rhcert-transfer URL. An unauthorized attacker may use this flaw to gather sensible information.

Scores

The record has no CVSS score.

Weaknesses

Affected Products

ProductVersions
redhat-certificationn/a
  • redhat-certification 7Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.