CVE-2019-3897 - AskarLabs CVE Database

CVE-2019-3897

Vendor N/A

Product redhat-certification

Weakness CWE-552 · Files accessible externally

Published March 16, 2021

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

It has been discovered in redhat-certification that any unauthorized user may download any file under /var/www/rhcert, provided they know its name. Red Hat Certification 6 and 7 is vulnerable to this issue.

Key dates

02Disclosure timeline

March 16, 2021 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-3897 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/552.html

Related vulnerabilities

04Related CVE

CVE-2022-24075 CVE-2021-32752 Files or Directories Accessible to External Parties in ether/logs CVE-2026-8704 Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified CVE-2023-4743 Dreamer CMS file access CVE-2026-45543 Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files share