Red Hat Security Advisory: redhat-certification security update

Fixed packages 7

Vulnerabilities 3

• Critical 9.8
  CVE-2018-10870

  redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use …

  redhat-certification rhcertstore.py
  Jul 19, 2018
• High 7.5
  CVE-2018-10869

  redhat-certification does not properly restrict files that can be download through the /download page. A remote attacke…

  [UNKNOWN] redhat-certification
  Jul 19, 2018
• Medium 5.3
  CVE-2018-10864

  An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded. …

  [UNKNOWN] redhat-certification
  Aug 13, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1593627
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1593780
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1593803
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2373.json
• report
  https://access.redhat.com/security/cve/CVE-2018-10864
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10864
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10864
• report
  https://access.redhat.com/security/cve/CVE-2018-10869
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10869
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10869
• report
  https://access.redhat.com/security/cve/CVE-2018-10870
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10870
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10870