#VU29 Authentication bypass - CVE-2016-2141 

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU29

#VU29 Authentication bypass - CVE-2016-2141

Published: June 27, 2016 / Updated: November 22, 2018


Vulnerability identifier: #VU29
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2016-2141
CWE-ID: CWE-592
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Software vendor:

Description

The vulnerability allows a remote attacker to bypass security controls on the target system.

The vulnerability exists due to improper authentication in JGroups of new nodes joining the cluster. A remote attacker can obtain potentially sensitive information by bypassing security controls on the target system, sending and receiving messages within the cluster.

Successful exploitation of this vulnerability may result in disclosure of system information,

Remediation


External links