CVE-2016-5425 The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows lo...
HighCVSS 7.8
EPSS 3.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache tomcat | All versions | No fix listed |
References
- legalhackers.com exploit third-party-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- RHSA-2016:2046 third-party-advisory vendor-advisory
- [oss-security] 20161010 CVE-2016-5425 - Apache Tomcat packaging on RedHat-based distros - Root Privilege Escalation (affecting CentOS, Fedora, OracleLinux, RedHat etc.) mailing-list third-party-advisory
- www.oracle.com third-party-advisory
- 93472 third-party-advisory vdb-entry
- 1036979 third-party-advisory vdb-entry
- [activemq-issues] 20190925 [jira] [Created] (AMQ-7310) Security Vulnerabilities in Tomcat-websocket-api.jar mailing-list
- 40488 exploit third-party-advisory vdb-entry
- www.oracle.com third-party-advisory