Lucene search
Redhat.comRH:CVE-2016-2141HistoryJun 23, 2016 - 8:48 p.m.
CVE-2016-2141
2016-06-2320:48:29
redhat.com
access.redhat.com
16
0.007 Low
EPSS
Percentile
79.5%
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.
Mitigation
Please refer to <https://access.redhat.com/articles/2360521> for more information.
Related
redhat
redhat
(RHSA-2016:1332) Critical: Red Hat JBoss Enterprise Application Platform 7.0 security update
2016-06-23 20:41:30
(RHSA-2016:1347) Critical: Red Hat JBoss BPM Suite security update
2016-06-27 21:02:38
(RHSA-2016:1345) Critical: Red Hat JBoss BRMS security update
2016-06-27 21:02:14
veracode
veracode
Authorization Bypass
2019-01-15 09:11:57
nvd
nvd
CVE-2016-2141
2016-06-30 16:59:00
debiancve
debiancve
CVE-2016-2141
2016-06-30 16:59:00
cvelist
cvelist
CVE-2016-2141
2016-06-30 00:00:00
prion
prion
Design/Logic Flaw
2016-06-30 16:59:00
nessus
nessus
RHEL 5 / 6 : JBoss EAP (RHSA-2016:1328)
2016-06-27 00:00:00
RHEL 6 / 7 : JBoss EAP (RHSA-2016:1332)
2018-09-04 00:00:00
RHEL 5 / 6 / 7 : JBoss EAP (RHSA-2016:1330)
2016-06-27 00:00:00
osv
osv
Improper Input Validation in JGroups
2022-05-13 01:03:31
github
github
Improper Input Validation in JGroups
2022-05-13 01:03:31
cve
cve
CVE-2016-2141
2016-06-30 16:59:00
ubuntucve
ubuntucve
CVE-2016-2141
2016-06-30 00:00:00
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00