Design/Logic Flaw

2023-07-1816:15:00

PRIOn knowledge base

www.prio-n.com

hazelcast

executor services

security flaw

authentication

permissions

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don’t check client permissions properly, allowing authenticated users to execute tasks on members without the required permissions granted.

CPENameOperatorVersion
hazelcastge5.2.0
hazelcastlt5.2.4
hazelcastge5.2.0
hazelcastlt5.2.4
hazelcastge5.1.0
hazelcastlt5.1.7
hazelcastge5.1.0
hazelcastlt5.1.7
hazelcastge5.0.0
hazelcastlt5.0.5

Name	Operator	Version
hazelcast	ge	5.2.0
hazelcast	lt	5.2.4
hazelcast	ge	5.2.0
hazelcast	lt	5.2.4
hazelcast	ge	5.1.0
hazelcast	lt	5.1.7
hazelcast	ge	5.1.0
hazelcast	lt	5.1.7
hazelcast	ge	5.0.0
hazelcast	lt	5.0.5