CVE-2016-7066

It was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise Application Platform before 7.1.0 can allow any local user to connect to CLI and allow the user to execute any arbitrary operations.

Score

CVSS 3.0 7.8 High

Status

Modified - secalert@redhat.com

Published

2018-09-11

Last modified

2024-08-06

Weaknesses

CWE-266, CWE-275

Affected products

• Jboss Enterprise Application Platform (Red Hat)
• Jboss Enterprise Application Platform (Redhat)

References

• https://access.redhat.com/errata/RHSA-2017:3456
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7066