VDB
DEBIAN-CVE-2016-2141
DEBIAN-CVE-2016-2141
PUBLISHED
CVSS 9.800000190734863 CRITICAL
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | libjgroups-java | 2.12.2, 2.12.2, 2.12.2.Final-5 |
| Debian:11 | libjgroups-java | 0, 0, 2.12.2 |
| Debian:14 | libjgroups-java | *, 0, 2.12.2 |
| Debian:13 | libjgroups-java | 0, 2.12.2, 0 |
Timeline
- Jun 30, 2016 CVE Published
- Apr 28, 2026 CVE Updated