CVE-2016-7066

Summary

It was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise Application Platform before 7.1.0 can allow any local user to connect to CLI and allow the user to execute any arbitrary operations.

Affected Software

VendorProductVersion RangeStatus
Red HatJBoss Enterprise Application Platform7.1.0affected

Weaknesses

  • CWE-266: CWE-266

ADP Enrichment

CVE Program Container

Additional References

References