Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2016-8657

EPSS 0.06% · P18
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2016-8657

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable to jboss group (root:jboss, 664). On systems using classic /etc/init.d init scripts (i.e. on Red Hat Enterprise Linux 6 and earlier), the file is sourced by the jboss init script and its content executed with root privileges when jboss service is started, stopped, or restarted.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Red Hat JBoss Enterprise Application Platform 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat JBoss Enterprise Application Platform（EAP）是美国红帽（Red Hat）公司的一套开源、基于J2EE的中间件平台。该平台主要用于构建、部署和托管Java应用程序与服务。 Red Hat JBoss EAP中存在权限许可和访问控制漏洞，该漏洞源于EAP将错误的权限用于/etc/sysconfig/jbossas配置文件。本地攻击者可利用该漏洞获取提升的权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2016-8657

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-8657

请登录查看更多情报信息。

Same Patch Batch · n/a · 2018-07-31 · 16 CVEs total

CVE-2018-14300Foxit Reader和PhantomPDF 安全漏洞
CVE-2017-13652NetApp OnCommand Insight 安全漏洞
CVE-2017-17707Pleasant Password Server 安全漏洞
CVE-2017-17708Pleasant Password Server 安全漏洞
CVE-2018-11338Intuit Lacerte 2017 for Windows 安全漏洞
CVE-2018-12939SeedDMS 路径遍历漏洞
CVE-2018-12940SeedDMS 安全漏洞
CVE-2018-12941SeedDMS 安全漏洞
CVE-2018-12942SeedDMS SQL注入漏洞
CVE-2018-12943SeedDMS 跨站脚本漏洞
CVE-2018-12944SeedDMS 跨站脚本漏洞
CVE-2018-14432OpenStack Keystone Federation组件安全漏洞
CVE-2018-14533Inteno IOPSYS 安全漏洞
CVE-2018-14581Redgate .NET Reflector和SmartAssembly 安全漏洞
CVE-2018-14767Kamailio 安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2016-8657

No comments yet

Leave a comment