CVE-2018-10870 in redhat-certification

요약

\~에 의해 MITRE

redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any file, potentially gaining remote code execution.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• 책임이 있는: Red Hat, Inc.
• 예약하다: 2018. 05. 09.
• 공개: 2018. 07. 19.
• 모더레이션: 수락
• 항목: VDB-121974
• CPE: 준비됨
• CWE: CWE-20 (확인됨)
• CVSS: 9.8 (NVD)
• EPSS: 0.06182
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-10870
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-10870
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-10870/