CVE
- Id
- 93145
- CVE No.
- CVE-2016-6325
- Status
- Candidate
- Description
- The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 uses weak permissions for (1) /etc/sysconfig/tomcat and (2) /etc/tomcat/tomcat.conf, which allows local users to gain privileges by leveraging membership in the tomcat group.
- Phase
- Assigned (20160726)
- Votes
- None (candidate not yet proposed)
- Comments