222 matches found
Sensitive Information Disclosure
Hazelcast is vulnerable to Information Disclosure. The vulnerability exists in the getOrMaskValue function at ConfigXmlGenerator.java because the password is not properly masked which allows an attacker to view sensitive information such as the password...
cloud.piranha.extension:piranha-extension-hazelcast (=22.2.0), cn.vertxup:infix-mysql (=0.8.1) +113 more potentially affected by CVE-2023-33264 via com.hazelcast:hazelcast (>=5.0-BETA-1 <=5.0.4)
com.hazelcast:hazelcast MAVEN version =5.0-BETA-1, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.1 and more Source cves: CVE-2023-33264 Source advisory: OSV:GHSA-5GJ6-62G7-VMGF...
ch.mobi.mobitor:mobitor-base (>=3.1.242 <=3.1.485), cloud.piranha.extension:piranha-extension-hazelcast (>=21.6.0 <=21.10.0) +246 more potentially affected by CVE-2023-33264 via com.hazelcast:hazelcast (>=4.0-BETA-1 <=4.2.8)
com.hazelcast:hazelcast MAVEN version =4.0-BETA-1, =3.1.242, =21.6.0, =20.5.0, =1.0.2, =1.0.2, =8.10.0, =8.11.0, =8.11.0, =8.10.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.2 and more Source cves: CVE-2023-33264 Source advisory: OSV:GHSA-5GJ6-62G7-VMGF...
cloud.piranha.extension:piranha-extension-hazelcast (>=22.5.0 <=22.11.0), cloud.piranha:debug (>=22.5.0 <=22.11.0) +142 more potentially affected by CVE-2023-33264 via com.hazelcast:hazelcast (>=5.1-BETA-1 <=5.1.5)
com.hazelcast:hazelcast MAVEN version =5.1-BETA-1, =22.5.0, =22.5.0, =8.1.1, =8.2.0, =5.1.15, =5.1.15, =1.40.0, =0.7.0, =1.1.8, =1.1.8, =1.1.8, =1.1.8, =1.1.15 - com.gitee.kamismile:gatewayweb =1.2.8 and more Source cves: CVE-2023-33264 Source advisory: OSV:GHSA-5GJ6-62G7-VMGF...
cloud.piranha.extension:piranha-extension-hazelcast (>=22.12.0 <=23.4.0), cloud.piranha:debug (>=22.12.0 <=23.1.0) +202 more potentially affected by CVE-2023-33264 via com.hazelcast:hazelcast (>=5.2-BETA-1 <=5.2.3)
com.hazelcast:hazelcast MAVEN version =5.2-BETA-1, =22.12.0, =22.12.0, =23.1.0 - cn.vertxup:aeon-ambient =0.9.0 - cn.vertxup:aeon-aurora =0.9.0 - cn.vertxup:aeon-code =0.9.0 - cn.vertxup:aeon-cosmos =0.9.0 - cn.vertxup:aeon-ecology =0.9.0 - cn.vertxup:aeon-edge =0.9.0 - cn.vertxup:aeon-eternal...
cloud.piranha.extension:piranha-extension-hazelcast (=23.5.0), com.github.ben-manes.caffeine:simulator (=3.1.6) +31 more potentially affected by CVE-2023-33264 via com.hazelcast:hazelcast (>=5.3.0-BETA-1 <=5.3.0-BETA-2)
com.hazelcast:hazelcast MAVEN version =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-2 and more Source cves: CVE-2023-33264 Source...
Hazelcast vulnerable to unmasked password exposure
In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...
GHSA-5GJ6-62G7-VMGF Hazelcast vulnerable to unmasked password exposure
In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...
CVE-2023-33264
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...
CVE-2023-33264
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...
Design/Logic Flaw
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...
Hazelcast 安全漏洞
Hazelcast Hazelcast IMDG is a set of scalable open source data distribution platform of the U.S. Hazelcast company . The platform supports a variety of distributed data structures , support for distributed caching and other features . A security vulnerability exists in Hazelcast versions 5.0.4 an...
CVE-2023-33264
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...
CVE-2023-33264
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...
CVE-2023-33264
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...
CVE-2023-33264
CVE-2023-33264 affects Hazelcast through 5.0.4, 5.1–5.1.6, and 5.2–5.2.3, where configuration routines do not mask passwords in the member configuration, allowing Hazelcast Management Center users to view some secrets. Multiple connected sources confirm impact on Hazelcast and variants of product...
PT-2023-7546 · Hazelcast · Hazelcast
Name of the Vulnerable Software and Affected Versions: Hazelcast versions 5.0.0 through 5.0.4 Hazelcast versions 5.1.0 through 5.1.6 Hazelcast versions 5.2.0 through 5.2.3 Description: The issue is related to insufficient protection of registration data in the Hazelcast platform, which can be...
Vulnerability fixed in Red Hat Fuse
Red Hat has fixed a vulnerability in Fuse 7. The vulnerability is located in the Hazelcast integrated in Fuse Connection Cache and allows an unauthenticated malicious agent to able to manipulate data in the cluster without prior authentication or authorization. Red Hat has released updates to fix...
Critical: Red Hat Security Advisory: Red Hat Fuse 7.11.1.P1 security update for Fuse on EAP
A security update for Fuse 7.11.1 is now available for Red Hat Fuse on EAP. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring...