CoreCVE
Back

HIGH

jboss: jbossas writable config files allow privilege escalation

Published Jul 31, 2018

Description

It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable to jboss group (root:jboss, 664). On systems using classic /etc/init.d init scripts (i.e. on Red Hat Enterprise Linux 6 and earlier), the file is sourced by the jboss init script and its content executed with root privileges when jboss service is started, stopped, or restarted.

Affected products

Remediation

Red Hat statement

It was found that a variant of the Tomcat CVE-2016-6325 exploit is also applicable to Red Hat JBoss Enterprise Application Platform 5 and 6. CVE-2016-8567 addresses these problems with JBoss EAP. The complexity is high as EAP has many files and configuration options. The issue is now corrected in JBoss Enterprise Application Platform EAP 6.4.14. For further information please refer https://access.redhat.com/articles/3016681

Metrics

Weaknesses (2)

CWE-264

CWE-732

Incorrect Permission Assignment

References (11)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jul 31, 2018
Updated Aug 6, 2024
Reserved Oct 12, 2016
Link CVE-2016-8657
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2016-8657
Red Hat
Severity Important
Public date Oct 10, 2016
Links CVE-2016-8657 - Bugzilla