Search for packages
| purl | pkg:maven/org.jgroups/jgroups@3.2.1.Final |
| Next non-vulnerable version | 4.0.0.Final |
| Latest non-vulnerable version | 4.0.0.Final |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-h873-uz9q-ebcr
Aliases: CVE-2016-2141 GHSA-rc7h-x6cq-988q |
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-vsfy-3jf4-aqg7
Aliases: CVE-2013-4112 GHSA-cc62-496p-hrr7 |
Authentication via cached credentials The `DiagnosticsHandler` in this package allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials. |
Affected by 2 other vulnerabilities. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||