Strix
26.1K

CVE-2016-8627

UnknownEPSS 2.69%

Last modified

CVE-2016-8627 is a vulnerability of currently unknown severity. admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the user's browser to request the log files consuming enough resources that normal server functioning could be impaired.. EPSS estimates a 2.69% chance of exploitation in the next 30 days.

Description

admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the user's browser to request the log files consuming enough resources that normal server functioning could be impaired.

Metrics

EPSS Probability
2.69%

84.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
RedhatJboss Enterprise Application Platform6.4.0
RedhatJboss Enterprise Application Platform7.0.0
RedhatJboss Enterprise Application Platform7.1.0
RedhatKeycloakAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2016-8627?
admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the user's browser to request the log files consuming enough resources that normal server functioning could be impaired.
How severe is CVE-2016-8627?
Severity scoring for CVE-2016-8627 is pending analysis. The EPSS model estimates a 2.69% probability of exploitation in the next 30 days.
How do I fix CVE-2016-8627?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-8627?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST