Red Hat Security Advisory

RHSA-2016:1331

Red Hat JBoss Enterprise Application Platform 6.4 security update

Released 2016-06-23 · Red Hat rating Critical · View on Red Hat →

Fixed in

TI-2016-01953 CVE-2016-2141 · GHSA-rc7h-x6cq-988q

MEDIUM 50

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04698 Published 2016-06-30 Partial fix · 3.6.10.Final, 3.2.16.Final CWE-20