CVE-2016-8627

CVE-2016-8627 describes a vulnerability in Red Hat JBoss Enterprise Application Platform and Keycloak’s admin-cli, specifically in versions prior to 3.0.0.alpha25 and 2.2.1.cr2. This flaw allows server log files, normally accessible via EAP features, to be downloaded through simple GET requests, making them susceptible to cross-origin attacks. The vulnerability has a CVSS v3 score of 6.5 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and primarily leading to high availability impact (denial of service) by consuming server resources. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.