CVE-2023-45859

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...

CVE-2023-45859

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...

Design/Logic Flaw

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...

Hazelcast Security Breach

Hazelcast Hazelcast IMDG is a set of scalable open source data distribution platform of the U.S. Hazelcast company . The platform supports a variety of distributed data structures, supports distributed caching and other features. Hazelcast has a security vulnerability that stems from the inabilit...

CVE-2023-45859

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...

CVE-2023-45859

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...

CVE-2023-45859

A missing permission check vulnerability exists in the com.hazelcast:hazelcast dependency, affecting multiple versions including 4.1.10 , 4.2 through 4.2.8 , 5.0 through 5.0.5 , 5.1 through 5.1.7 , 5.2 through 5.2.4 , and 5.3 through 5.3.2 . This flaw allows authenticated users to bypass permissi...

CVE-2023-45859: Insecure Storage of Sensitive Information

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...

CVE-2023-45859

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...

cloud.piranha.extension:piranha-extension-hazelcast (>=23.6.0, <=23.11.0), com.bucket4j:bucket4j-hazelcast (>=8.5.0, <=8.9.0) +516 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (>=5.3.0, <=5.3.4)

com.hazelcast:hazelcast MAVEN version =5.3.0, =23.6.0, =8.5.0, =8.5.0, =1.1.15, =3.1.7, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.4 and more Source cves: CVE-2023-45859 Source advisory: MEND:CVE-2023-45859...

CVE-2023-45859

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...

cloud.piranha.extension:piranha-extension-hazelcast (>=22.12.0, <=23.4.0), cloud.piranha:debug (>=22.12.0, <=23.1.0) +210 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (>=5.2.0, <=5.2.4)

com.hazelcast:hazelcast MAVEN version =5.2.0, =22.12.0, =22.12.0, =23.1.0 - cn.vertxup:aeon-ambient 0.9.0 - cn.vertxup:aeon-aurora 0.9.0 - cn.vertxup:aeon-code 0.9.0 - cn.vertxup:aeon-cosmos 0.9.0 - cn.vertxup:aeon-ecology 0.9.0 - cn.vertxup:aeon-edge 0.9.0 - cn.vertxup:aeon-eternal 0.9.0 -...

com.bestellensoftware:jsync.io (>=1.10.0, <=1.10.1), com.erudika:para-server (>=1.18.2, <=1.18.3) +38 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.6.1)

com.hazelcast:hazelcast MAVEN version 3.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.bestellensoftware:jsync.io =1.10.0, =1.18.2, =1.18.3 - com.github.automately:automately-core 1.11.0 -...

com.hazelcast:hazelcast-client (3.1.8), com.hazelcast:hazelcast-cloud (3.1.8) +6 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.1.8)

com.hazelcast:hazelcast MAVEN version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.1.8 - com.hazelcast:hazelcast-cloud 3.1.8 - com.hazelcast:hazelcast-hibernate...

com.expedia.dsp:circus-train-datasqueeze (1.0), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=0.0.10, <=0.0.15) +35 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.5.5)

com.hazelcast:hazelcast MAVEN version 3.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.expedia.dsp:circus-train-datasqueeze 1.0 - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter...

Missing permission checks on Hazelcast client protocol

Impact In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster. Patches Fix versions: 5.2.5, 5.3.5,...

com.hazelcast:hazelcast-all (2.1.3), com.hazelcast:hazelcast-client (2.1.3) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (2.1.3)

com.hazelcast:hazelcast MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.1.3 - com.hazelcast:hazelcast-client 2.1.3 - com.hazelcast:hazelcast-cloud 2.1.3 -...

com.hazelcast:hazelcast-all (2.1.1), com.hazelcast:hazelcast-client (2.1.1) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (2.1.1)

com.hazelcast:hazelcast MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.1.1 - com.hazelcast:hazelcast-client 2.1.1 - com.hazelcast:hazelcast-cloud 2.1.1 -...

com.hazelcast:hazelcast-client (3.3.1), com.hazelcast:hazelcast-cloud (3.3.1) +12 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.3.1)

com.hazelcast:hazelcast MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.1 - com.hazelcast:hazelcast-cloud 3.3.1 - com.hazelcast:hazelcast-hibernate...

GHSA-XH6M-7CR7-XX66 Missing permission checks on Hazelcast client protocol

Impact In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster. Patches Fix versions: 5.2.5, 5.3.5,...