CVE ID:	CVE-2016-5425
Description:	The Tomcat package on Red Hat Enterprise Linux (RHEL) 7, Fedora, CentOS, Oracle Linux, and possibly other Linux distributions uses weak permissions for /usr/lib/tmpfiles.d/tomcat.conf, which allows local users to gain root privileges by leveraging membership in the tomcat group.
Test IDs:	1.3.6.1.4.1.25623.1.0.882575   1.3.6.1.4.1.25623.1.0.871670
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5425 1036979 http://www.securitytracker.com/id/1036979 40488 https://www.exploit-db.com/exploits/40488/ 93472 http://www.securityfocus.com/bid/93472 RHSA-2016:2046 http://rhn.redhat.com/errata/RHSA-2016-2046.html [activemq-issues] 20190925 [jira] [Created] (AMQ-7310) Security Vulnerabilities in Tomcat-websocket-api.jar https://lists.apache.org/thread.html/6b414817c2b0bf351138911c8c922ec5dd577ebc0b9a7f42d705752d%40%3Cissues.activemq.apache.org%3E [oss-security] 20161010 CVE-2016-5425 - Apache Tomcat packaging on RedHat-based distros - Root Privilege Escalation (affecting CentOS, Fedora, OracleLinux, RedHat etc.) http://www.openwall.com/lists/oss-security/2016/10/10/2 http://legalhackers.com/advisories/Tomcat-RedHat-Pkgs-Root-PrivEsc-Exploit-CVE-2016-5425.html http://legalhackers.com/advisories/Tomcat-RedHat-Pkgs-Root-PrivEsc-Exploit-CVE-2016-5425.html http://packetstormsecurity.com/files/139041/Apache-Tomcat-8-7-6-Privilege-Escalation.html http://packetstormsecurity.com/files/139041/Apache-Tomcat-8-7-6-Privilege-Escalation.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html