CVE-2023-45859

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...

Atlassian Confluence 3.7.x < 7.19.22 / 7.20.x < 8.5.9 / 8.6.x < 8.9.0 / 9.2.0 (CONFSERVER-98713)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-98713 advisory. - In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client...

Atlassian Confluence 5.5 < 7.19.22 / 7.20.x < 8.5.9 / 8.6.x < 8.9.0 MPC (CONFSERVER-95839)

The version of Atlassian Confluence Server running on the remote host is affected by a missing permission check vulnerability as referenced in the CONFSERVER-95839 advisory. - In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through...

cloud.piranha.extension:piranha-extension-hazelcast (>=22.12.0, <=23.4.0), cloud.piranha:debug (>=22.12.0, <=23.1.0) +210 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (>=5.2.0, <=5.2.4)

com.hazelcast:hazelcast MAVEN version =5.2.0, =22.12.0, =22.12.0, =23.1.0 - cn.vertxup:aeon-ambient 0.9.0 - cn.vertxup:aeon-aurora 0.9.0 - cn.vertxup:aeon-code 0.9.0 - cn.vertxup:aeon-cosmos 0.9.0 - cn.vertxup:aeon-ecology 0.9.0 - cn.vertxup:aeon-edge 0.9.0 - cn.vertxup:aeon-eternal 0.9.0 -...

com.hazelcast:hazelcast-client (3.1.8), com.hazelcast:hazelcast-cloud (3.1.8) +6 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.1.8)

com.hazelcast:hazelcast MAVEN version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.1.8 - com.hazelcast:hazelcast-cloud 3.1.8 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-all (1.9.4.6), com.hazelcast:hazelcast-client (1.9.4.6) +14 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.9.4.6)

com.hazelcast:hazelcast MAVEN version 1.9.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.6 - com.hazelcast:hazelcast-client 1.9.4.6 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-all (2.0.3), com.hazelcast:hazelcast-client (2.0.3) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (2.0.3)

com.hazelcast:hazelcast MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.0.3 - com.hazelcast:hazelcast-client 2.0.3 - com.hazelcast:hazelcast-cloud 2.0.3 -...

com.englishtown:vertx-mod-hk2 (>=1.0.0-beta1, <=1.0.0-beta5), com.englishtown:vertx-mod-jersey (>=1.0.0-beta1, <=1.0.0-beta5) +11 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (2.5.1)

com.hazelcast:hazelcast MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.englishtown:vertx-mod-hk2 =1.0.0-beta1, =1.0.0-beta1, =2.0.0-beta1, =2.0.0-beta1, =1.0.0-beta1, =2.0.0-beta1,...

br.com.ingenieux:jbake-maven-plugin (>=0.0.3, <=0.0.9), com.darylteo:vertx-gradle-plugin (1.1.0-alpha1) +79 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (2.6)

com.hazelcast:hazelcast MAVEN version 2.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - br.com.ingenieux:jbake-maven-plugin =0.0.3, =1.0.0, =1.0.0-final, =1.0.0-final, =1.0.0-cr2, =1.0.0-cr2, =1.0.0-fina...

com.hazelcast:hazelcast-client (2.6.3), com.hazelcast:hazelcast-cloud (2.6.3) +10 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (2.6.3)

com.hazelcast:hazelcast MAVEN version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 2.6.3 - com.hazelcast:hazelcast-cloud 2.6.3 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-all (1.9.4.3), com.hazelcast:hazelcast-client (1.9.4.3) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.9.4.3)

com.hazelcast:hazelcast MAVEN version 1.9.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.3 - com.hazelcast:hazelcast-client 1.9.4.3 - com.hazelcast:hazelcast-cloud...

com.ahome-it:ahome-tooling-server-hazelcast (1.1.24-release), com.hazelcast:hazelcast-build-utils (3.7.3) +9 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.7.3)

com.hazelcast:hazelcast MAVEN version 3.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.ahome-it:ahome-tooling-server-hazelcast 1.1.24-release - com.hazelcast:hazelcast-build-utils 3.7.3 -...

com.hazelcast.simulator:tests-hz37 (>=0.9.6, <=0.9.9), com.hazelcast:hazelcast-build-utils (3.7.6) +2 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.7.6)

com.hazelcast:hazelcast MAVEN version 3.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.simulator:tests-hz37 =0.9.6, =0.9.9 - com.hazelcast:hazelcast-build-utils 3.7.6 -...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.7, <=2.0.3), com.github.wu191287278:spring-boot-starter-dubbo (>=1.5.3, <=1.5.33) +8 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.7.7)

com.hazelcast:hazelcast MAVEN version 3.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter =1.0.7, =1.5.3, =0.2.0, =0.2.0, =0.2.0, =0.2.0,...

com.hazelcast.jet:hazelcast-jet (0.3), com.hazelcast.jet:hazelcast-jet-client-protocol (0.3) +6 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.8-rc1)

com.hazelcast:hazelcast MAVEN version 3.8-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet 0.3 - com.hazelcast.jet:hazelcast-jet-client-protocol 0.3 -...

com.hazelcast:hazelcast-build-utils (3.8-ea), com.hazelcast:hazelcast-client (3.8-ea) +4 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.8-ea)

com.hazelcast:hazelcast MAVEN version 3.8-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.8-ea - com.hazelcast:hazelcast-client 3.8-ea -...

co.easimart:vertx-util (1.1.0), com.consol.citrus:citrus-vertx (>=2.7.8, <=2.8.0) +67 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.8.2)

com.hazelcast:hazelcast MAVEN version 3.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - co.easimart:vertx-util 1.1.0 - com.consol.citrus:citrus-vertx =2.7.8, =3.5.0, =1.24.4, =1.24.4, =0.9.6, =2.1.0,...

com.hazelcast:hazelcast-build-utils (3.8.5), com.hazelcast:hazelcast-client (3.8.5) +7 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.8.5)

com.hazelcast:hazelcast MAVEN version 3.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.8.5 - com.hazelcast:hazelcast-client 3.8.5 - com.hazelcast:hazelcast-spring...

com.hazelcast:hazelcast-build-utils (3.9-ea), com.hazelcast:hazelcast-client (3.9-ea) +4 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.9-ea)

com.hazelcast:hazelcast MAVEN version 3.9-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.9-ea - com.hazelcast:hazelcast-client 3.9-ea -...

com.hazelcast:hazelcast-build-utils (3.10.1), com.hazelcast:hazelcast-client (3.10.1) +34 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.10.1)

com.hazelcast:hazelcast MAVEN version 3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.10.1 - com.hazelcast:hazelcast-client 3.10.1 -...