RHSA-2016:1389: Critical: Red Hat JBoss Fuse Service Works security update
Red Hat JBoss Fuse Service Works is the next-generation ESB and business process automation infrastructure.<br>Security Fix(es):<br><li> It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks. (CVE-2016-2141)</li> This issue was discovered by Dennis Reed (Red Hat).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2016:1389?
The severity of RHSA-2016:1389 is categorized as important.
How do I fix RHSA-2016:1389?
To fix RHSA-2016:1389, update to the latest version of Red Hat JBoss Fuse Service Works that addresses the identified vulnerabilities.
What vulnerabilities does RHSA-2016:1389 address?
RHSA-2016:1389 addresses a vulnerability in JGroups related to insufficient header validation for encryption and authentication protocols.
Who is affected by RHSA-2016:1389?
RHSA-2016:1389 affects users of Red Hat JBoss Fuse Service Works utilizing JGroups for cluster communication.
What are the risks of not addressing RHSA-2016:1389?
Not addressing RHSA-2016:1389 may allow attackers to exploit vulnerabilities, leading to unauthorized access or data leakage.