Lucene search

K
f5F5F5:K73644551
HistoryOct 20, 2016 - 12:00 a.m.

K73644551 : Apache Tomcat vulnerability CVE-2016-6325

2016-10-2000:00:00
my.f5.com
34

AI Score

7.7

Confidence

High

EPSS

0

Percentile

10.3%

Security Advisory Description

The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 uses weak permissions for (1) /etc/sysconfig/tomcat and (2) /etc/tomcat/tomcat.conf, which allows local users to gain privileges by leveraging membership in the tomcat group. (CVE-2016-6325)
Impact
There is no impact; F5 products are not affected by this vulnerability.