Description

The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

Remediation

References

http://rhn.redhat.com/errata/RHSA-2013-1208.html

http://rhn.redhat.com/errata/RHSA-2013-1209.html

https://bugzilla.redhat.com/show_bug.cgi?id=983489

http://rhn.redhat.com/errata/RHSA-2013-1207.html

http://rhn.redhat.com/errata/RHSA-2013-1437.html

http://rhn.redhat.com/errata/RHSA-2013-1771.html

http://rhn.redhat.com/errata/RHSA-2014-0029.html

Related Vulnerabilities

CVE-2018-1192 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-uaa

CVE-2018-14642 Vulnerability in maven package io.undertow:undertow-core

CVE-2015-1840 Vulnerability in npm package jquery-ujs

CVE-2013-6447 Vulnerability in maven package org.jboss.seam:jboss-seam

CVE-2017-16068 Vulnerability in npm package ffmepg

Severity

Critical

Classification

CWE-200