CVE-2018-10870 in redhat-certification

Riassunto

di MITRE

redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any file, potentially gaining remote code execution.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: Red Hat, Inc.
• Prenotare: 09/05/2018
• Divulgazione: 19/07/2018
• Moderazione: accettato
• Voce: VDB-121974
• CPE: pronto
• CWE: CWE-20 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.06182
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-10870
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-10870
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-10870/