SB2016062302 - Red Hat update for Red Hat JBoss Enterprise Application Platform 6.4
Published: June 23, 2016
Security Bulletin ID
SB2016062302
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Authentication bypass (CVE-ID: CVE-2016-2141)
The vulnerability allows a remote attacker to bypass security controls on the target system.The vulnerability exists due to improper authentication in JGroups of new nodes joining the cluster. A remote attacker can obtain potentially sensitive information by bypassing security controls on the target system, sending and receiving messages within the cluster.
Successful exploitation of this vulnerability may result in disclosure of system information,
Remediation
Install update from vendor's website.