CVE-2023-33265 | BDVDB-2026-207652 Detail

Description#

In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions properly, allowing authenticated users to execute tasks on members without the required permissions granted.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/hazelcast/hazelcast
https://support.hazelcast.com/s/article/Security-Advisory-for-CVE-2023-33265

Exploit#

No public exploit known

History#

Version 12023-07-18Record published in the CVE List.
Version 22024-10-28Most recent update recorded in the CVE List.