Lucene search
PRIOn knowledge basePRION:CVE-2016-6325HistoryOct 13, 2016 - 2:59 p.m.
Design/Logic Flaw
2016-10-1314:59:00
PRIOn knowledge base
www.prio-n.com
7
The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 uses weak permissions for (1) /etc/sysconfig/tomcat and (2) /etc/tomcat/tomcat.conf, which allows local users to gain privileges by leveraging membership in the tomcat group.
References
rhn.redhat.com/errata/RHSA-2016-2045.html
rhn.redhat.com/errata/RHSA-2016-2046.html
rhn.redhat.com/errata/RHSA-2017-0457.html
www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html
www.securityfocus.com/bid/93478
access.redhat.com/errata/RHSA-2017:0455
access.redhat.com/errata/RHSA-2017:0456
bugzilla.redhat.com/show_bug.cgi?id=1367447
Related
cvelist
cvelist
CVE-2016-6325
2016-10-13 14:00:00
f5
f5
K73644551 : Apache Tomcat vulnerability CVE-2016-6325
2016-10-20 00:00:00
SOL73644551 - Apache Tomcat vulnerability CVE-2016-6325
2016-10-20 00:00:00
redhatcve
redhatcve
CVE-2016-6325
2016-10-10 08:47:27
CVE-2016-8657
2016-12-01 09:17:27
nvd
nvd
CVE-2016-6325
2016-10-13 14:59:09
ubuntucve
ubuntucve
CVE-2016-6325
2016-10-13 00:00:00
cve
cve
CVE-2016-6325
2016-10-13 14:59:09
veracode
veracode
Privilege Escalation
2019-05-20 00:08:58
debiancve
debiancve
CVE-2016-6325
2016-10-13 14:59:00
nessus
nessus
RHEL 5 : tomcat (Unpatched Vulnerability)
2024-06-03 00:00:00
EulerOS 2.0 SP1 : tomcat (EulerOS-SA-2016-1049)
2017-05-01 00:00:00
RHEL 7 : tomcat (RHSA-2016:2046) (httpoxy)
2016-10-11 00:00:00
redhat
redhat
(RHSA-2016:2046) Important: tomcat security update
2016-10-10 18:29:51
(RHSA-2016:2045) Important: tomcat6 security and bug fix update
2016-10-10 18:29:33
openvas
openvas
RedHat Update for tomcat RHSA-2016:2046-01
2016-10-11 00:00:00
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2016-1049)
2020-01-23 00:00:00
CentOS Update for tomcat CESA-2016:2046 centos7
2016-10-12 00:00:00
centos
centos
tomcat security update
2016-10-11 18:36:52
tomcat6 security update
2016-10-11 18:36:02
oraclelinux
oraclelinux
tomcat security update
2016-10-10 00:00:00
tomcat6 security and bug fix update
2016-10-10 00:00:00
amazon
amazon
Important: tomcat6, tomcat7, tomcat8
2016-11-10 18:00:00
mageia
mageia
Updated tomcat packages fix security vulnerability
2016-11-05 01:29:35
fedora
fedora
[SECURITY] Fedora 23 Update: tomcat-8.0.38-1.fc23
2016-11-13 02:21:02
[SECURITY] Fedora 25 Update: tomcat-8.0.38-1.fc25
2016-11-19 21:26:18
[SECURITY] Fedora 24 Update: tomcat-8.0.38-1.fc24
2016-11-12 23:56:29
