CVE-2016-8656 in jbossas

Resumen

por MITRE

Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege escalation.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Red Hat, Inc.
• Reservar: 2016-10-12
• Divulgación: 2018-05-22
• Moderación: aceptado
• Artículo: VDB-118065
• CPE: listo
• CWE: CWE-264 (confirmado)
• CVSS: 7.8 (NVD)
• EPSS: 0.00071
• KEV: no
• Actividades: muy bajo
• Sector: Education, Telecommunication, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8656
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8656
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8656/