Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m449-cmf5-q9wf

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

It has been discovered that redhat-certification does not perform an authorization check and it allows an unauthenticated user to remove a "system" file, that is an xml file with host related information, not belonging to him. This flaw affects redhat-certification version 7.

It has been discovered that redhat-certification does not perform an authorization check and it allows an unauthenticated user to remove a "system" file, that is an xml file with host related information, not belonging to him. This flaw affects redhat-certification version 7.

EPSS

Процентиль: 76%
0.00925
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 5.3
redhat
больше 7 лет назад

It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to remove a "system" file, that is an xml file with host related information, not belonging to him.

CVSS3: 9.1
nvd
больше 4 лет назад

It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to remove a "system" file, that is an xml file with host related information, not belonging to him.

EPSS

Процентиль: 76%
0.00925
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-862