GitHub Advisoryadvisory · Maven

GHSA-cc62-496p-hrr7 Exposure of Sensitive Information to an Unauthorized Actor in JGroup

MEDIUM Published 2022-05-17 Modified 2022-07-08 Official page ↗
Aliases
CVE-2013-4112
Ecosystem
Maven
Packages
org.jgroups:jgroups
Severity
Moderate
Weaknesses
CWE-200
Reviewed
2022-07-08

Affected packages

• Maven org.jgroups:jgroups: >= 3.0.0, < 3.2.9.Final → fixed in 3.2.9.Final • Maven org.jgroups:jgroups: >= 3.3.0, < 3.3.3.Final → fixed in 3.3.3.Final

Description

The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

Related

Alias · CVE (1)

  • CVE-2013-4112 The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References