CVE-2016-2141

CRITICAL9.8EPSS 2.3%

Improper Input Validation in JGroups

發布日:2022/5/13修改日:2026/4/28
也稱為:DEBIAN-CVE-2016-2141

描述

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.

受影響套件(2)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1CRITICAL9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

參考連結(31)