CVE-2016-6325

CVE	CVE-2016-6325
State	PUBLISHED
Assigner	redhat
Source Priority	CVE Program / NVD first with legacy fallback
Published	2016-10-13 14:59:09 UTC
Updated	2026-05-06 22:30:45 UTC
Description	The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 uses weak permissions for (1) /etc/sysconfig/tomcat and (2) /etc/tomcat/tomcat.conf, which allows local users to gain privileges by leveraging membership in the tomcat group.

Primary CVSS: v3.0 7.8 HIGH from [email protected]

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.000780000 probability, percentile 0.230270000 (date 2026-05-07)

Problem Types: CWE-264 | n/a

Version	Source	Type	Score	Severity	Vector
3.0	[email protected]	Primary	7.8	HIGH	`CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
2.0	[email protected]	Primary	7.2		`AV:L/AC:L/Au:N/C:C/I:C/A:C`

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Access Vector

Local

Access Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

AV:L/AC:L/Au:N/C:C/I:C/A:C

Type	Vendor	Product	Version	Update	Edition	Language
Application	Apache	Tomcat	-	All	All	All
Operating System	Redhat	Enterprise Linux	5.0	All	All	All
Operating System	Redhat	Enterprise Linux	6.0	All	All	All
Operating System	Redhat	Enterprise Linux	7.0	All	All	All
Operating System	Redhat	Enterprise Linux Desktop	6.0	All	All	All
Operating System	Redhat	Enterprise Linux Desktop	7.0	All	All	All
Operating System	Redhat	Enterprise Linux Hpc Node	6.0	All	All	All
Operating System	Redhat	Enterprise Linux Hpc Node	7.0	All	All	All
Operating System	Redhat	Enterprise Linux Hpc Node Eus	7.2	All	All	All
Operating System	Redhat	Enterprise Linux Server	6.0	All	All	All
Operating System	Redhat	Enterprise Linux Server	7.0	All	All	All
Operating System	Redhat	Enterprise Linux Server Aus	7.2	All	All	All
Operating System	Redhat	Enterprise Linux Server Eus	7.2	All	All	All
Operating System	Redhat	Enterprise Linux Workstation	6.0	All	All	All
Operating System	Redhat	Enterprise Linux Workstation	7.0	All	All	All
Application	Redhat	Jboss Enterprise Web Server	2.0.0	All	All	All
Application	Redhat	Jboss Web Server	3.0	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

Reference	Source	Link	Tags
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	access.redhat.com
Apache Tomcat CVE-2016-6325 Local Privilege Escalation Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	rhn.redhat.com	Vendor Advisory
Bug 1367447 – CVE-2016-6325 tomcat: tomcat writable config files allow privilege escalation	af854a3a-2127-422b-91ae-364da2661108	bugzilla.redhat.com	Issue Tracking, VDB Entry, Vendor Advisory
Oracle Linux Bulletin - October 2016	af854a3a-2127-422b-91ae-364da2661108	www.oracle.com
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	access.redhat.com
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	rhn.redhat.com	Vendor Advisory
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	rhn.redhat.com
Red Hat Customer Portal	MITRE	access.redhat.com
Red Hat Customer Portal	MITRE	access.redhat.com
Red Hat Customer Portal	MITRE	access.redhat.com
CVE-2016-6325 - Red Hat Customer Portal	MITRE	access.redhat.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.