CVE-2018-10865: Red Hat Certification

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated user to call a "restart" RPC method on any host accessible by the system, even if not belonging to him.

Affected products

• Red Hat Certification: version 7.0 only

Published 2021-05-26. Last modified 2026-06-17.