Vulnerabilities > Redhat > Certification > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-03-16 CVE-2019-3897 Files or Directories Accessible to External Parties vulnerability in Redhat Certification
It has been discovered in redhat-certification that any unauthorized user may download any file under /var/www/rhcert, provided they know its name.
network
low complexity
redhat CWE-552
5.0
5.0
2018-08-13 CVE-2018-10864 Resource Exhaustion vulnerability in Redhat Certification
An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded.
local
low complexity
redhat CWE-400
6.2
6.2