This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-45859 | BDVDB-2026-225905 Detail

Description#

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact low, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-922 Insecure Storage of Sensitive Information

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.