CVE-2016-7066: High severity jboss enterprise application platform vulnerability
It was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise Application Platform before 7.1.0 can allow any local user to connect to CLI and allow the user to execute any arbitrary operations.
Other sources
The improper default permissions on /tmp/auth directory can allow any local user to connect to CLI and allow arbitary operations.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7066?
CVE-2016-7066 has a moderate severity rating due to its potential exploitation by local users.
How do I fix CVE-2016-7066?
To fix CVE-2016-7066, update the JBoss Enterprise Application Platform to version 7.1.0 or later.
What are the risks associated with CVE-2016-7066?
The risks associated with CVE-2016-7066 include unauthorized local users being able to connect to CLI and execute arbitrary operations.
Which versions of JBoss are affected by CVE-2016-7066?
CVE-2016-7066 affects JBoss Enterprise Application Platform versions prior to 7.1.0.
Is CVE-2016-7066 related to directory permissions?
Yes, CVE-2016-7066 involves improper default permissions on the /tmp/auth directory.