Vulnerability Database

314,343

Total vulnerabilities in the database

CVE-2016-5406

The domain controller in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2 allows remote authenticated users to gain privileges by leveraging failure to propagate administrative RBAC configuration to all slaves.

  • Published: Sep 26, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2016-5406
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
redhat / jboss_enterprise_application_platform - 7.0.1.x