CVE-2023-45859

2024-02-2800:00:00

mitre

www.cve.org

hazelcast

version 4.1.10

version 5.3.2

authenticated user

data access

vulnerability

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don’t check permissions properly, allowing authenticated users to access data stored in the cluster.