CVE-2016-8656

jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation

Published May 22, 2018 CVSS 3.0 · 7 High EPSS < 1% KEV · Not listed
Description
Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege escalation.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2016-9495 Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege escalation.
History
Type Values Removed Values Added
CPEs cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7
Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 2:27 AM
Reserved
Oct 12, 2016, 12:00 AM
Status
Modified
Published
May 22, 2018, 5:29 PM
Modified
Jun 17, 2026, 12:54 AM
Severity
Important
Public date
Sep 15, 2016, 12:00 AM