7.8

CVE-2016-8657

It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable to jboss group (root:jboss, 664). On systems using classic /etc/init.d init scripts (i.e. on Red Hat Enterprise Linux 6 and earlier), the file is sourced by the jboss init script and its content executed with root privileges when jboss service is started, stopped, or restarted.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Jboss Enterprise Application Platform Version5.0.0
   Redhat ≫ Enterprise Linux Version5
   Redhat ≫ Enterprise Linux Version6.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.337
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://rhn.redhat.com/errata/RHSA-2017-0826.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2017-0827.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2017-0828.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2017-0829.html
Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:1609
Vendor Advisory
http://www.securityfocus.com/bid/96896
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8657
Vendor Advisory
Issue Tracking