CVE-2016-8657

    Dashboard / Vulnerabilities / CVE-2016-8657

    CVE-2016-8657

    Published: 31 Jul 2018Last Modified: 12 Feb 2026

    Summary:

    Details: It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable to jboss group (root:jboss, 664). On systems using classic /etc/init.d init scripts (i.e. on Red Hat Enterprise Linux 6 and earlier), the file is sourced by the jboss init script and its content executed with root privileges when jboss service is started, stopped, or restarted.

    References: http://rhn.redhat.com/errata/RHSA-2017-0826.html, http://rhn.redhat.com/errata/RHSA-2017-0827.html, http://rhn.redhat.com/errata/RHSA-2017-0828.html, http://rhn.redhat.com/errata/RHSA-2017-0829.html, http://www.securityfocus.com/bid/96896, https://access.redhat.com/errata/RHSA-2018:1609, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8657, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8657

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    mysql-3.23.22-beta
    mysql-3.23.24-beta
    mysql-3.23.27-beta
    mysql-3.23.28-gamma
    mysql-3.23.29a-gamma
    mysql-3.23.30-gamma
    mysql-3.23.31
    mysql-3.23.32
    mysql-3.23.33
    mysql-3.23.34
    mysql-3.23.35
    mysql-3.23.36
    mysql-3.23.37
    mysql-3.23.38
    mysql-3.23.39
    mysql-3.23.41
    mysql-3.23.42
    mysql-3.23.44
    mysql-3.23.45
    mysql-3.23.46
    mysql-3.23.47
    mysql-3.23.48
    mysql-3.23.50
    mysql-3.23.51
    mysql-3.23.52
    mysql-3.23.53
    mysql-3.23.54
    mysql-3.23.55
    mysql-3.23.56
    mysql-3.23.57
    mysql-3.23.58

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High