CVE-2016-8656 in jbossas

الملخص

بحسب MITRE

Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege escalation.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• مسؤول: Red Hat, Inc.
• حجز: 12/10/2016
• إفشاء: 22/05/2018
• الاعتدال: تمت الموافقة
• إدخال: VDB-118065
• CPE: جاهز
• CWE: CWE-264 (مؤكد)
• CVSS: 7.8 (NVD)
• EPSS: 0.00071
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Transportation, Government, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8656
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8656
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8656/