Lucene search

K
osvGoogleOSV:CVE-2023-45859
HistoryFeb 28, 2024 - 10:15 p.m.

CVE-2023-45859

2024-02-2822:15:26
Google
osv.dev
4
hazelcast
security
vulnerability
client operations
authenticated users
data access

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don’t check permissions properly, allowing authenticated users to access data stored in the cluster.

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%