CVE-2018-10866

概要

参考情報

• access.redhat.com/security/cve/CVE-2018-10866 · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

certification のその他の脆弱性

• CVE-2018-10868高 7.5redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allowing an unauthentica…
• CVE-2018-10867緊急 9.1Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove an…
• CVE-2018-10865高 7.5It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenti…
• CVE-2018-10863高 7.5It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store…