description: It has been discovered in redhat-certification that any unauthorized user may download any file under /var/www/rhcert, provided they know its name. Red Hat Certification 6 and 7 is vulnerable to this issue.
problem types: CWE-552
affected:
{
product: redhat-certification
vendor: n/a
versions:
status: affected, version: As shipped with Red Hat Certification 6 and 7
}