CVE-2016-5406

Published: Sep 26, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

The domain controller in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2 allows remote authenticated users to gain privileges by leveraging failure to propagate administrative RBAC configuration to all slaves.

Affected (1)

Products: Redhat: Jboss Enterprise Application Platform

Redhat

1 product

Jboss Enterprise Application Platform

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Redhat Jboss Enterprise Application Platform	Up to 7.0.1

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0

Related CWEs

CWE-264

References (18)

http://rhn.redhat.com/errata/RHSA-2016-1838.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-1839.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-1840.html

Source: secalert@redhat.com

Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-1841.html

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2017:3454

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2017:3455

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2017:3456

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2017:3458

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1359014

Source: secalert@redhat.com

Issue TrackingVDB EntryVendor Advisory

http://rhn.redhat.com/errata/RHSA-2016-1838.html