Security Advisory

CVE-2018-10865

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-05-26 18:03:11

Last updated 2024-08-05 07:46:47

Assigner redhat

State PUBLISHED

Description

It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to call a "restart" RPC method on any host accessible by the system, even if not belonging to him.

← Browse all CVEs View on cve.org ↗