It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable to jboss group (root:jboss, 664). On systems using classic /etc/init.d init scripts (i.e. on Red Hat Enterprise Linux 6 and earlier), the file is sourced by the jboss init script and its content executed with root privileges when jboss service is started, stopped, or restarted.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2018-07-31T19:00:00

Updated: 2024-08-06T02:27:41.296Z

Reserved: 2016-10-12T00:00:00

Link: CVE-2016-8657

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-07-31T19:29:00.650

Modified: 2023-02-12T23:26:43.127

Link: CVE-2016-8657

cve-icon Redhat

Severity : Important

Publid Date: 2016-10-10T00:00:00Z

Links: CVE-2016-8657 - Bugzilla