CVEs-PoC/2016/CVE-2016-8656.md

### [CVE-2016-8656](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8656)
![](https://img.shields.io/static/v1?label=Product&message=jbossas&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=jbossas%205.2.0-23%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=jbossas%206.4.13%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=jbossas%207.0.5%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-284&color=brightgreen)

### Description

Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege escalation.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon