CVE-2018-10870 in redhat-certification

摘要

由 MITRE

redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any file, potentially gaining remote code execution.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• 负责: Red Hat, Inc.
• 预定: 2018-05-09
• 披露: 2018-07-19
• 管理: 已接受
• 条目: VDB-121974
• CPE: 准备好
• CWE: CWE-20 (已确认)
• CVSS: 9.8 (NVD)
• EPSS: 0.06182
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-10870
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-10870
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-10870/