CVE-2024-56518

Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...

CVE-2024-56518

Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...

CVE-2024-56518

Hazelcast Management Center versions prior to 6.0 are vulnerable to remote code execution (RCE) . The root cause is a configuration flaw involving the JndiLoginModule user.provider.url within a hazelcast-client XML document . An attacker can exploit this by uploading a malicious client configurat...

CVE-2024-56518

Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...

CVE-2024-56518

Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...

PT-2025-17196 · Hazelcast · Hazelcast Management Center

Name of the Vulnerable Software and Affected Versions: Hazelcast Management Center versions prior to 6.0 Description: The issue allows remote code execution through a JndiLoginModule user.provider.url in a hazelcast-client XML document, which can be uploaded at the "/cluster-connections" API...

CVE-2024-56518

Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...

Hazelcast Management Center 安全漏洞

Hazelcast Management Center is a unified real-time data platform from Hazelcast USA. A security vulnerability exists in Hazelcast Management Center 6.0 and prior versions that stems from a JndiLoginModule configuration leading to remote code execution...

CVE-2024-56518: Improper Control of Generation of Code

Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...

com.ahome-it:ahome-tooling-server-core (>=1.1.0-release, <=1.1.3-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.0-release, <=1.1.3-release) +3 more potentially affected by CVE-2025-22228 via org.springframework.security:spring-security-crypto (4.1.0.release)

org.springframework.security:spring-security-crypto MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-crypto and may be impacted: - com.ahome-it:ahome-tooling-server-core...

Atlassian Confluence 3.7.x < 7.19.22 / 7.20.x < 8.5.9 / 8.6.x < 8.9.0 / 9.2.0 (CONFSERVER-98713)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-98713 advisory. - In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client...

WS-2022-0048

Security vulnerability found in com.hazelcast.jet:hazelcast-jet package from 4.1 before 4.5.3 and in com.hazelcast:hazelcast package from prior to 4.0.5 and from 4.1.1 before 4.1.8 , from 4.2 before 4.2.4 , from 5.0 before 5.0.2...

com.hazelcast:hazelcast Dependency in Bitbucket Data Center and Server

This High severity com.hazelcast:hazelcast Dependency vulnerability was introduced in versions 7.21.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.7.0, 8.8.0, 8.9.0, 8.10.0, 8.11.0, 8.12.0, 8.13.0, 8.14.0-eap01, 8.15.0, 8.16.0, 8.17.0, and 8.18.0 of Bitbucket Data Center and Server. This com.hazelcast:hazelcas...

com.hazelcast:hazelcast Dependency in Confluence Data Center and Server

This High severity com.hazelcast:hazelcast Dependency vulnerability was introduced in versions 3.7 of Confluence Data Center and Server. This com.hazelcast:hazelcast Dependency vulnerability, with a CVSS Score of 7.6 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L allows an...

Hazelcast data analysis platform Permission Bypass

The vulnerability of the Hazelcast data analysis platform is related to permission processing errors. Exploiting this vulnerability allows a remote attacker to perform arbitrary actions...

Atlassian Confluence 5.5 < 7.19.22 / 7.20.x < 8.5.9 / 8.6.x < 8.9.0 MPC (CONFSERVER-95839)

The version of Atlassian Confluence Server running on the remote host is affected by a missing permission check vulnerability as referenced in the CONFSERVER-95839 advisory. - In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through...

com.aerse:gcless (11.2), com.aerse:spring-security-taglib (1.1) +107 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.2.1.release)

org.springframework.security:spring-security-core MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.aerse:gcless 11.2 -...

How to remove a node from a cluster in on-premise Endpoint Management

This guide provides step-by-step instructions on how to remove a node from your on-premise Endpoint Management cluster. The process involves shutting down the node intended for decommission. The Endpoint Management system's Hazelcast service will then recognize the node as inactive and...

CVE-2023-45859

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...

CVE-2023-45859

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...