description: Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user.
problem types: CWE-552
affected:
{
product: redhat-certification
vendor: n/a
versions:
status: affected, version: redhat-certification 7
}