CVE-2023-45859

2024-02-2822:15:26

[email protected]

web.nvd.nist.gov

cve

hazelcast

4.1.10

4.2

5.0

5.1

5.2

5.3

security vulnerability

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don’t check permissions properly, allowing authenticated users to access data stored in the cluster.