~ / search / GHSA-cc62-496p-hrr7

GHSA-cc62-496p-hrr7

Exposure of Sensitive Information to an Unauthorized Actor in JGroup

Source: GitHub Advisory Database (reviewed) Moderate CVE-2013-4112

Packages

EcosystemPackageAffectedFixed in
Maven org.jgroups:jgroups >= 3.0.0, < 3.2.9.Final 3.2.9.Final
Maven org.jgroups:jgroups >= 3.3.0, < 3.3.3.Final 3.3.3.Final

Details

As written in the advisory (Markdown source, shown as plain text).

The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.

References

External links from the advisory. They lead to third-party sites.