vulnerability

Red Hat JBoss EAP: CVE-2016-5406: Other

Name: Red Hat JBoss EAP: CVE-2016-5406: Other
Creator: Red Hat
Published: 2016-07-26T00:00:00.000Z
Keywords: CVE, Red Hat JBoss EAP, 2016, 5406, Other, red-hat-jboss-eap-upgrade-latest, Severity 7

Try Surface Command

Back to search

Severity

CVSS

(AV:A/AC:M/Au:S/C:P/I:C/A:C)

Published

Jul 26, 2016

Added

Sep 19, 2024

Modified

Jun 19, 2025

Description

The domain controller in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2 allows remote authenticated users to gain privileges by leveraging failure to propagate administrative RBAC configuration to all slaves.. The domain controller will not propagate its administrative RBAC configuration to some slaves. An attacker could use this to escalate their privileges.

Solution

red-hat-jboss-eap-upgrade-latest

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report