CVE-2018-10869 Path traversal in redhat-certification

High 7.5 Published 19 Jul 2018 Updated 5 Aug 2024

A remote attacker can download arbitrary files accessible by the httpd user due to improper file restriction in the download page.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2018-10869?

CVE-2018-10869 is a high-severity path traversal vulnerability in Redhat Enterprise Linux, published on 19 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by the user running httpd.

Weakness: CWE-732, CWE-552

Which versions are affected by CVE-2018-10869?

It affects 2 products.

Products include Redhat Certification, Redhat Enterprise Linux.

How do I fix CVE-2018-10869?

Apply the vendor's patch.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2018-10869 being exploited?

There is no known exploitation of CVE-2018-10869 in the wild and no public exploit code.

All Redhat Enterprise Linux vulnerabilities

Sources

Also known as GHSA-5v46-5c9p-j4mg.