CVE-2016-8657
- State
- Published
- Severity
- Not scored
- Published
- Jul 31, 2018
- Updated
- Aug 6, 2024
- Reserved
- Oct 12, 2016
Description
It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable to jboss group (root:jboss, 664). On systems using classic /etc/init.d init scripts (i.e. on Red Hat Enterprise Linux 6 and earlier), the file is sourced by the jboss init script and its content executed with root privileges when jboss service is started, stopped, or restarted.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2017:0828vendor-advisory
- RHSA-2017:0827vendor-advisory
- RHSA-2018:1609vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8657
- RHSA-2017:0826vendor-advisory
- RHSA-2017:0829vendor-advisory
- 96896vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.