Red Hat Security Advisory

RHSA-2016:1330

Red Hat JBoss Enterprise Application Platform 6.4 security update

Released 2016-06-23 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el5
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el6
Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server jgroups-1:3.2.16-1.Final_redhat_1.1.ep6.el7

TI-2016-01953 CVE-2016-2141 · GHSA-rc7h-x6cq-988q

MEDIUM 50

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04698 Published 2016-06-30 Partial fix · 3.6.10.Final, 3.2.16.Final CWE-20