#VU29 Authentication bypass - CVE-2016-2141

Vulnerability identifier: #VU29

Vulnerability risk: High

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2016-2141

CWE-ID: CWE-592

Exploitation vector: Network

Exploit availability: No

Description
The vulnerability allows a remote attacker to bypass security controls on the target system.

The vulnerability exists due to improper authentication in JGroups of new nodes joining the cluster. A remote attacker can obtain potentially sensitive information by bypassing security controls on the target system, sending and receiving messages within the cluster.

Successful exploitation of this vulnerability may result in disclosure of system information,

Mitigation
Red Hat has issued a fix.

The Red Hat advisories are available at:

https://access.redhat.com/errata/RHSA-2016:1328
https://rhn.redhat.com/errata/RHSA-2016-1329.html
https://access.redhat.com/errata/RHSA-2016:1330
https://rhn.redhat.com/errata/RHSA-2016-1331.html
https://access.redhat.com/errata/RHSA-2016:1332
https://rhn.redhat.com/errata/RHSA-2016-1333.html
https://access.redhat.com/errata/RHSA-2016:1334

External links
https://rhn.redhat.com/errata/RHSA-2016-1333.html

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.