CVE-2016-2141

Description

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

2.357

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2016-2141 are fixed in JGroups-jgroups 3.6.10	Windows
Vulnerabilities CVE-2016-2141 are fixed in JGroups-jgroups 3.2.16	Windows
Vulnerabilities CVE-2016-2141 are affected in Red Hat JBoss Enterprise Application Platform 7 5.2	Windows
Vulnerabilities CVE-2016-2141 are affected in Red Hat JBoss Enterprise Application Platform 7 6.4	Windows
Multiple Vulnerabilities are affected in Red Hat JBoss Enterprise Application Platform 7 7.0	Windows
Vulnerabilities CVE-2016-2141 are fixed in JGroups-jgroups for Linux 3.6.10	Linux
Vulnerabilities CVE-2016-2141 are fixed in JGroups-jgroups for Linux 3.2.16	Linux
CVE-2016-2141	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234