Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-5425
HistoryOct 13, 2016 - 2:59 p.m.

Design/Logic Flaw

2016-10-1314:59:00
PRIOn knowledge base
www.prio-n.com
12

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

48.0%

The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.