CVE-2016-7066CWE-266

CVE-2016-7066: vulnerability in Red Hat JBoss Enterprise Application Platform

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
It was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise Application Platform before 7.1.0 can allow any local user to connect to CLI and allow the user to execute any arbitrary operations.
Related CVEs — Red Hat JBoss Enterprise Application Platform

In the same product, most dangerous first.