Description

The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

Remediation

References

http://rhn.redhat.com/errata/RHSA-2013-1207.html

http://rhn.redhat.com/errata/RHSA-2013-1208.html

http://rhn.redhat.com/errata/RHSA-2013-1209.html

http://rhn.redhat.com/errata/RHSA-2013-1437.html

http://rhn.redhat.com/errata/RHSA-2013-1771.html

http://rhn.redhat.com/errata/RHSA-2014-0029.html

https://bugzilla.redhat.com/show_bug.cgi?id=983489

Related Vulnerabilities

CVE-2016-2166 Vulnerability in maven package org.apache.qpid:proton-j

CVE-2018-19413 Vulnerability in maven package org.sonarsource.sonarqube:sonar-plugin-api

CVE-2017-12616 Vulnerability in maven package org.apache.tomcat:tomcat-catalina

CVE-2023-20866 Vulnerability in maven package org.springframework.session:spring-session-core

CVE-2021-34429 Vulnerability in maven package org.eclipse.jetty:jetty-webapp

Severity

Critical

Tags

CWE-200