CVE-2016-8657

CVE-2016-8657 describes a privilege escalation vulnerability in Red Hat Enterprise Linux (RHEL) and JBoss Enterprise Application Platform (EAP) versions using classic init scripts. Incorrect permissions on the /etc/sysconfig/jbossas configuration file allowed members of the 'jboss' group to modify it, leading to arbitrary code execution with root privileges during service start, stop, or restart operations. This vulnerability carries a CVSS v3 score of 7.8 (High), indicating a local attack vector with low complexity and potential for high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.