Improper Access Control Affecting eap7-weld-core-jsf package, versions <0:2.4.3-1.Final_redhat_1.1.ep7.el7

Q: How to fix?

Upgrade RHEL:7 eap7-weld-core-jsf to version 0:2.4.3-1.Final_redhat_1.1.ep7.el7 or higher. This issue was patched in RHSA-2017:3455 .

Threat Intelligence

0.37% (29^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL7-EAP7WELDCOREJSF-5329643
published26 Mar 2023
disclosed15 Sept 2016

Report a new vulnerability Found a mistake?

Introduced: 15 Sep 2016

CVE-2016-8656 (opens in a new tab) CWE-284 (opens in a new tab)

How to fix?

Upgrade RHEL:7 eap7-weld-core-jsf to version 0:2.4.3-1.Final_redhat_1.1.ep7.el7 or higher.
This issue was patched in RHSA-2017:3455.

NVD Description

Note: Versions mentioned in the description apply only to the upstream eap7-weld-core-jsf package and not the eap7-weld-core-jsf package as distributed by RHEL. See How to fix? for RHEL:7 relevant fixed versions and status.

Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege escalation.