Red Hat Security AdvisoryRHSA-2016:1332
Red Hat JBoss Enterprise Application Platform 7.0 security update
Released 2016-06-23 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 6 Server eap7-jgroups-3.6.8-3.Final_redhat_3.1.ep7.el6
- Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 7 Server eap7-jgroups-3.6.8-3.Final_redhat_3.1.ep7.el7
Fixes 1 record
Priority MEDIUM 50
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04698 · Published 2016-06-30 · Partial fix · 3.6.10.Final, 3.2.16.Final CWE-20
