Improper Default Permissions in JBoss Enterprise Application Platform by Red Hat

CVE-2016-7066

What is CVE-2016-7066?

The JBoss Enterprise Application Platform versions prior to 7.1.0 are susceptible to a security issue due to improper default permissions set on the /tmp/auth directory. This vulnerability could allow any local user to access the Command Line Interface (CLI), which may lead to the execution of arbitrary commands and operations on the system. The open permissions on the directory expose it to unauthorized access, making it essential for users to update their installations to mitigate this risk.

References