Red Hat Security Advisory

RHSA-2018:2373

redhat-certification security update

Released 2018-08-09 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Certification for Red Hat Enterprise Linux 7 redhat-certification-5.16-20180809.el7, redhat-certification-backend-5.16-20180809.el7, redhat-certification-baremetal-5.16-20180809.el7 +4

TI-2018-07684 CVE-2018-10870 · GHSA-3v7r-5qj8-2v68

MEDIUM 51

redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06104 Published 2018-07-19 Fixed CWE-22

TI-2018-07683 CVE-2018-10869 · GHSA-5v46-5c9p-j4mg

LOW 38

redhat-certification does not properly restrict files that can be download through the /download page.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02733 Published 2018-07-19 Fixed CWE-552

TI-2018-07678 CVE-2018-10864 · GHSA-3mqx-hc7r-v3c4

LOW 30

An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded.

CVSS 3.0MEDIUM 6.2 Local No auth No interaction EPSS 0.01232 Published 2018-08-13 Fixed CWE-400