PT-2021-9110
CVE-2019-3897
·
تاريخ النشر
2021-03-16
·
تاريخ التحديث
2021-03-22
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Red Hat Certification versions 6 and 7
Description
It has been discovered that any unauthorized user may download any file under /var/www/rhcert, provided they know its name.
Recommendations
For Red Hat Certification version 6, restrict access to the /var/www/rhcert directory to prevent unauthorized file downloads.
For Red Hat Certification version 7, restrict access to the /var/www/rhcert directory to prevent unauthorized file downloads.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾