Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-5425
HistoryOct 13, 2016 - 2:59 p.m.

Design/Logic Flaw

2016-10-1314:59:00
PRIOn knowledge base
www.prio-n.com
10

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.1%

The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.