CVE-2016-2141

CVE-2016-2141

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear libjgroups-java+ Monitorear org.jgroups:jgroups

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 4.7%
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.
Productos afectados
n/a · n/a