CVE-2023-45859

2024-02-2822:15:26

[email protected]

web.nvd.nist.gov

hazelcast

permission

vulnerability

4.1.10

4.2.8

5.0.5

5.1.7

5.2.4

5.3.2

authenticated users

data access

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don’t check permissions properly, allowing authenticated users to access data stored in the cluster.