Authentication bypass - CVE-2016-2141

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU29

Authentication bypass - CVE-2016-2141

Published: June 27, 2016 / Updated: November 22, 2018


Vulnerability identifier: #VU29
CSH Severity: High
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-2141
CWE-ID: CWE-592
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass security controls on the target system.

The vulnerability exists due to improper authentication in JGroups of new nodes joining the cluster. A remote attacker can obtain potentially sensitive information by bypassing security controls on the target system, sending and receiving messages within the cluster.

Successful exploitation of this vulnerability may result in disclosure of system information,

Affected software

JBoss Enterprise Application Platform

How to mitigate CVE-2016-2141



External References

Related Security Bulletins