Search for packages
purl | pkg:maven/org.jgroups/jgroups@3.3.0.Beta1 |
Next non-vulnerable version | 4.0.0.Final |
Latest non-vulnerable version | 4.0.0.Final |
Risk | 4.5 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-63q1-581t-aaag
Aliases: CVE-2016-2141 GHSA-rc7h-x6cq-988q |
Authorization bypass in JGroups JGroups does not require the proper headers for the ENCRYPT and AUTH protocols from nodes joining the cluster, which allows remote attackers to bypass security restrictions and send and receive messages within the cluster via unspecified vectors. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
VCID-rws9-7kwm-aaae
Aliases: CVE-2013-4112 GHSA-cc62-496p-hrr7 |
Authentication via cached credentials The `DiagnosticsHandler` in this package allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials. |
Affected by 1 other vulnerability. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |