CVE-2016-6325

The Tomcat package on Red Hat Enterprise Linux RHEL 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 uses weak permissions for 1 /etc/sysconfig/tomcat and 2 /etc/tomcat/tomcat.conf, which allows local users to gain privileges by leveraging membership in the tomcat group...

PT-2016-6828 · Red Hat +2 · Jbossws +4

Name of the Vulnerable Software and Affected Versions: Tomcat package on Red Hat Enterprise Linux RHEL versions 5 through 7 JBoss Web Server version 3.0 JBoss EWS version 2 Description: The issue is related to weak permissions for certain configuration files, specifically 1 /etc/sysconfig/tomcat...