Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m5xf-mwc4-9wpv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

It has been discovered that redhat-certification is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory through the /rhcert-transfer URL. An unauthorized attacker may use this flaw to gather sensible information. This flaw affects redhat-certification version 7.

It has been discovered that redhat-certification is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory through the /rhcert-transfer URL. An unauthorized attacker may use this flaw to gather sensible information. This flaw affects redhat-certification version 7.

EPSS

Процентиль: 46%
0.00235
Низкий

7.5 High

CVSS3

Дефекты

CWE-552

Связанные уязвимости

CVSS3: 5.3
redhat
больше 7 лет назад

It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory, through the /rhcert-transfer URL. An unauthorized attacker may use this flaw to gather sensible information.

CVSS3: 7.5
nvd
больше 4 лет назад

It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory, through the /rhcert-transfer URL. An unauthorized attacker may use this flaw to gather sensible information.

EPSS

Процентиль: 46%
0.00235
Низкий

7.5 High

CVSS3

Дефекты

CWE-552