CVE-2016-3427 Apache Cassandra Unspecified vulnerability related to JMX
Brandon Williams <[email protected]> Mon, 31 Aug 2020 17:03:52 -0500
| Newsgroups | gmane.comp.java.activemq.devel,gmane.comp.jakarta.jmeter.user,gmane.comp.security.oss.general,gmane.comp.security.bugtraq |
|---|---|
| Message-ID | <CAAafH9QFUn9+sqmWs_i6XsBJdw+kPau5WePkUa_5tLfA908k-g__8267.49296845577$1598916375$gmane$org@mail.gmail.com> |
Versions Affected: All versions prior to: 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2 Description: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX. By default Cassandra only binds JMX locally. Mitigation: 2.1.x users should upgrade to 2.1.22 2.2.x users should upgrade to 2.2.18 3.0.x users should upgrade to 3.0.22 3.11.x users should upgrade to 3.11.8 4.0-beta1 users should upgrade to 4.0-beta2 Alternatively, users can upgrade their JVM to versions after those in the description.