Description (CNA)
It has been discovered in redhat-certification that any unauthorized user may download any file under /var/www/rhcert, provided they know its name. Red Hat Certification 6 and 7 is vulnerable to this issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / redhat-certification | affected As shipped with Red Hat Certification 6 and 7 |
CWE
CWE-552
References
ADP enrichment
No English description supplied.