CVEvulnerability
CVE-2023-45859
7.6 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2024-02-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
- Weaknesses
- CWE-922
Description
In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster.
Affected configurations
• hazelcast hazelcast (<= 4.1.10)
• hazelcast hazelcast (>= 4.2.0 <= 4.2.8)
• hazelcast hazelcast (>= 5.0.0 <= 5.0.5)
• hazelcast hazelcast (>= 5.1.0 <= 5.1.7)
• hazelcast hazelcast (>= 5.2.0 < 5.2.5)
• hazelcast hazelcast (>= 5.3.0 < 5.3.5)
Related
Weakness · CWE (1)
- CWE-922 Insecure Storage of Sensitive Information weakness