7.8

CVE-2016-5425

Exploit

EPSS 14.47%
Veröffentlicht 13.10.2016 14:59:07
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apache ≫ Tomcat Version-

   Oracle ≫ Instantis Enterprisetrack Version17.1
   Oracle ≫ Instantis Enterprisetrack Version17.2
   Oracle ≫ Instantis Enterprisetrack Version17.3
   Oracle ≫ Linux Version7 Update-
   Redhat ≫ Enterprise Linux Desktop Version7.0
   Redhat ≫ Enterprise Linux Server Version7.0
   Redhat ≫ Enterprise Linux Server Aus Version7.2
   Redhat ≫ Enterprise Linux Server Aus Version7.3
   Redhat ≫ Enterprise Linux Server Aus Version7.4
   Redhat ≫ Enterprise Linux Server Aus Version7.6
   Redhat ≫ Enterprise Linux Server Aus Version7.7
   Redhat ≫ Enterprise Linux Server Eus Version7.2
   Redhat ≫ Enterprise Linux Server Eus Version7.3
   Redhat ≫ Enterprise Linux Server Eus Version7.4
   Redhat ≫ Enterprise Linux Server Eus Version7.5
   Redhat ≫ Enterprise Linux Server Eus Version7.6
   Redhat ≫ Enterprise Linux Server Eus Version7.7
   Redhat ≫ Enterprise Linux Server Tus Version7.2
   Redhat ≫ Enterprise Linux Server Tus Version7.3
   Redhat ≫ Enterprise Linux Server Tus Version7.6
   Redhat ≫ Enterprise Linux Server Tus Version7.7
   Redhat ≫ Enterprise Linux Workstation Version7.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	14.47%	0.94

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

http://rhn.redhat.com/errata/RHSA-2016-2046.html

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html

Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Third Party Advisory

https://lists.apache.org/thread.html/6b414817c2b0bf351138911c8c922ec5dd577ebc0b9a7f42d705752d%40%3Cissues.activemq.apache.org%3E

http://legalhackers.com/advisories/Tomcat-RedHat-Pkgs-Root-PrivEsc-Exploit-CVE-2016-5425.html

Third Party Advisory

Exploit

http://packetstormsecurity.com/files/139041/Apache-Tomcat-8-7-6-Privilege-Escalation.html

Third Party Advisory

Exploit

VDB Entry

http://www.openwall.com/lists/oss-security/2016/10/10/2

Third Party Advisory

Mailing List

http://www.securityfocus.com/bid/93472

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1036979

Third Party Advisory

VDB Entry

https://www.exploit-db.com/exploits/40488/

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-5425

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-5425

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-5425

EUVD