| Advisory ID |
project_kb_statements/CVE-2016-2141 |
| Aliases |
|
| Summary |
JGroups before 4.0 does not require the proper headers for the ENCRYPT and AUTH protocols from nodes joining the cluster, which allows remote attackers to bypass security restrictions and send and receive messages within the cluster via unspecified vectors.
|
| Status |
Published |
|
Exploitability |
0.5
|
| Weighted Severity |
0.0
|
| Risk |
|
| Affected and Fixed Packages |
Package Details
|
| Introduced and Fixed Package Commit Patches |
Package Commit Patches Details
|
Weaknesses (0)
| Reference id |
Reference type |
URL |
|
There are no known references.
|
|
No exploits are available.
|
No EPSS data available for this advisory.
| Patch URL |
|
There are no known patches.
|
|
There are no known vectors.
|
There are no SSVC decisions available.