Authentication bypass - CVE-2016-2141

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU29

Authentication bypass - CVE-2016-2141

Published: June 27, 2016 / Updated: November 22, 2018


Vulnerability identifier: #VU29
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2016-2141
CWE-ID: CWE-592
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vendor:
Affected software:

Detailed vulnerability description

The vulnerability allows a remote attacker to bypass security controls on the target system.

The vulnerability exists due to improper authentication in JGroups of new nodes joining the cluster. A remote attacker can obtain potentially sensitive information by bypassing security controls on the target system, sending and receiving messages within the cluster.

Successful exploitation of this vulnerability may result in disclosure of system information,

How to mitigate CVE-2016-2141


Sources