REDHAT-BUG-1660263: Medium severity Red Hat JBoss EAP vulnerability
JBoss EAP has a vulnerability that allows local users who are able to execute init.d script to terminate arbitrary process on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1660263?
The severity of REDHAT-BUG-1660263 is considered high due to the potential for local users to terminate arbitrary processes as root.
How do I fix REDHAT-BUG-1660263?
To fix REDHAT-BUG-1660263, apply the latest security patches provided by Red Hat for JBoss EAP.
Who is affected by REDHAT-BUG-1660263?
Local users with access to execute init.d scripts on systems running affected versions of Red Hat JBoss EAP are at risk.
What type of vulnerability is REDHAT-BUG-1660263?
REDHAT-BUG-1660263 is a local privilege escalation vulnerability that allows termination of arbitrary processes.
Can an attacker exploit REDHAT-BUG-1660263 remotely?
No, REDHAT-BUG-1660263 requires local access to the system, making it a local vulnerability.