CVE-2018-10863CWE-552

It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer…

published May 26, 2021

CVSS
—
EPSS
1%
Percentile
64.4
In the wild
Unconfirmed
What it is

It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory, through the /rhcert-transfer URL. An unauthorized attacker may use this flaw to gather sensible information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01063 · 64.4th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2021-05-26T18:03Z
EPSS history
Timeline
  • 26 MAY 18:03Z
    It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer…
    cvelistv5