CVE-2013-4112

JGroups: Authentication via cached credentials

Published Sep 28, 2013 CVSS 2.0 · 5.4 Medium EPSS 1.6% KEV · Not listed
Description
The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-3553 The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.
Github GHSA Github GHSA GHSA-cc62-496p-hrr7 Exposure of Sensitive Information to an Unauthorized Actor in JGroup
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 4:30 PM
Reserved
Jun 12, 2013, 12:00 AM
Status
Modified
Published
Sep 28, 2013, 7:55 PM
Modified
Jun 16, 2026, 11:56 PM
Severity
Low
Public date
Jul 11, 2013, 12:00 AM