Search for packages
purl | pkg:maven/org.jgroups/jgroups@3.5.0.Beta7 |
Next non-vulnerable version | 4.0.0.Final |
Latest non-vulnerable version | 4.0.0.Final |
Risk | 4.5 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-63q1-581t-aaag
Aliases: CVE-2016-2141 GHSA-rc7h-x6cq-988q |
Authorization bypass in JGroups JGroups does not require the proper headers for the ENCRYPT and AUTH protocols from nodes joining the cluster, which allows remote attackers to bypass security restrictions and send and receive messages within the cluster via unspecified vectors. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |