CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2018-10869
redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by the user running httpd.
Severity
- EPSS
- 2.7% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-552, CWE-732
- Published
- Modified
- Record from
- the NVD, synced
Affected
- redhat:certification
- redhat:enterprise_linux