CVEvulnerability

CVE-2023-33264

4.3 MEDIUM Published 2023-05-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-522

Description

In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.

Affected configurations

• hazelcast hazelcast (<= 5.0.4) • hazelcast hazelcast (>= 5.1 < 5.1.6) • hazelcast hazelcast (>= 5.2 <= 5.2.3)

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References