Login Request a demo
CE
Product
Certification
by Redhat · last CVE May 26, 2021
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 4Medium 2Low 0
Severity
All severities9Critical3High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Certification to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-10870
9.8
6%
Jul 19
redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile
Affected: All versions, or not specified
CVE-2018-10867
9.1
1%
May 26
Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user
Affected: 7.0
CVE-2018-10866
9.1
1%
May 26
It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to remove a "system" file,…
Affected: 7.0
CVE-2018-10868
7.5
1%
May 26
redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allowing an unauthenticated user to run a "Billion Laugh…
Affected: 7.0
CVE-2018-10865
7.5
1%
May 26
It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to call a "restart" RPC…
Affected: 7.0
CVE-2018-10863
7.5
1%
May 26
It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory, through the…
Affected: 7.0
CVE-2018-10869
7.5
3%
Jul 19
redhat-certification does not properly restrict files that can be download through the /download page
Affected: All versions, or not specified
CVE-2018-10864
6.2
1%
Aug 13
An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded
Affected: All versions, or not specified
CVE-2019-3897
5.3
1%
Mar 16
It has been discovered in redhat-certification that any unauthorized user may download any file under /var/www/rhcert, provided they know its name
Affected: All versions, or not specified
Showing 9