PT-2018-5049 · Red Hat · Red Hat

Bharti Kundal · Published 2018-07-31 · Updated 2023-02-12 · CVE-2016-8657

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux versions prior to 7

Description A security issue was found in certain versions of Red Hat Enterprise Linux, where EAP packages have incorrect permissions for the /etc/sysconfig/jbossas configuration file. The file is writable to the jboss group and its content is executed with root privileges when the jboss service is started, stopped, or restarted on systems using classic /etc/init.d init scripts, such as Red Hat Enterprise Linux 6 and earlier.

Recommendations For Red Hat Enterprise Linux versions prior to 7, consider restricting write access to the /etc/sysconfig/jbossas configuration file to prevent unauthorized modifications. As a temporary workaround, monitor the file for any changes and ensure that only authorized personnel can modify it. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-8657

RHSA-2017:0826

RHSA-2017:0827

RHSA-2017:0828

RHSA-2017:0829

RHSA-2018:1609

Affected Products

Red Hat

References · 9

• http://rhn.redhat.com/errata/RHSA-2017-0829.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0826.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0828.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:1609 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8657 · Security Note
• https://osv.dev/vulnerability/CVE-2016-8657 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0827.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8657 · Vendor Advisory
• http://securityfocus.com/bid/96896 · Note