com.hazelcast:hazelcast-client (3.3-ea), com.hazelcast:hazelcast-cloud (3.3-ea) +9 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.3-ea)

com.hazelcast:hazelcast MAVEN version 3.3-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3-ea - com.hazelcast:hazelcast-cloud 3.3-ea - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.3-rc3), com.hazelcast:hazelcast-cloud (3.3-rc3) +6 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.3-rc3)

com.hazelcast:hazelcast MAVEN version 3.3-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3-rc3 - com.hazelcast:hazelcast-cloud 3.3-rc3 -...

com.hazelcast:hazelcast-build-utils (3.4.8), com.hazelcast:hazelcast-client (3.4.8) +7 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.4.8)

com.hazelcast:hazelcast MAVEN version 3.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.4.8 - com.hazelcast:hazelcast-client 3.4.8 - com.hazelcast:hazelcast-cloud...

com.erudika:para-cache-hazelcast (1.30.0), com.hazelcast:hazelcast-build-utils (3.10.4) +28 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.10.4)

com.hazelcast:hazelcast MAVEN version 3.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.erudika:para-cache-hazelcast 1.30.0 - com.hazelcast:hazelcast-build-utils 3.10.4 -...

com.hazelcast:hazelcast-client (3.2.7), com.hazelcast:hazelcast-cloud (3.2.7) +6 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.2.7)

com.hazelcast:hazelcast MAVEN version 3.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.2.7 - com.hazelcast:hazelcast-cloud 3.2.7 - com.hazelcast:hazelcast-hibernate...

am.ik.hazelcast:hazelcast-dns-service-discovery (1.0.0), cn.vertxup:up-apollo (0.4.5) +42 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.9.2)

com.hazelcast:hazelcast MAVEN version 3.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - am.ik.hazelcast:hazelcast-dns-service-discovery 1.0.0 - cn.vertxup:up-apollo 0.4.5 - cn.vertxup:up-athena 0.4.5 -...

com.hazelcast:hazelcast-aws (2.3), com.hazelcast:hazelcast-build-utils (3.11-beta-1) +10 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.11-beta-1)

com.hazelcast:hazelcast MAVEN version 3.11-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-aws 2.3 - com.hazelcast:hazelcast-build-utils 3.11-beta-1 -...

com.hazelcast:hazelcast-aws (2.4), com.hazelcast:hazelcast-build-utils (3.12-beta-1) +3 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.12-beta-1)

com.hazelcast:hazelcast MAVEN version 3.12-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-aws 2.4 - com.hazelcast:hazelcast-build-utils 3.12-beta-1 -...

com.hazelcast:hazelcast-all (2.3), com.hazelcast:hazelcast-client (2.3) +7 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (2.3)

com.hazelcast:hazelcast MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.3 - com.hazelcast:hazelcast-client 2.3 - com.hazelcast:hazelcast-cloud 2.3 -...

com.hazelcast:hazelcast-all (2.1), com.hazelcast:hazelcast-client (2.1) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (2.1)

com.hazelcast:hazelcast MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.1 - com.hazelcast:hazelcast-client 2.1 - com.hazelcast:hazelcast-cloud 2.1 -...

com.hazelcast:hazelcast-all (2.0), com.hazelcast:hazelcast-client (2.0) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (2.0)

com.hazelcast:hazelcast MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.0 - com.hazelcast:hazelcast-client 2.0 - com.hazelcast:hazelcast-cloud 2.0 -...

com.hazelcast:hazelcast-all (1.9.4.8), com.hazelcast:hazelcast-client (1.9.4.8) +30 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.9.4.8)

com.hazelcast:hazelcast MAVEN version 1.9.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.8 - com.hazelcast:hazelcast-client 1.9.4.8 - com.hazelcast:hazelcast-cloud...

cloud.piranha.extension:piranha-extension-hazelcast (>=23.6.0, <=23.11.0), com.bucket4j:bucket4j-hazelcast (>=8.5.0, <=8.9.0) +516 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (>=5.3.0, <=5.3.4)

com.hazelcast:hazelcast MAVEN version =5.3.0, =23.6.0, =8.5.0, =8.5.0, =1.1.15, =3.1.7, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.4 and more Source cves: CVE-2023-45859 Source advisory: GHSA-XH6M-7CR7-XX66...

org.neo4j.app:neo4j-server-enterprise (>=3.0.0-m02, <=3.1.0-m06), org.neo4j.doc:neo4j-javadocs (>=3.0.0-m02, <=3.0.0-m03) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (3.5.1)

com.hazelcast:hazelcast-all MAVEN version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast-all and may be impacted: - org.neo4j.app:neo4j-server-enterprise =3.0.0-m02, =3.0.0-m02, =3.0.0-m02, =3.0.0-m02, =3.0.0-m02,...

cn.vertxup:vertx-co (0.4.9), cn.vertxup:vertx-ifx (0.4.9) +67 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.11.1)

com.hazelcast:hazelcast MAVEN version 3.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - cn.vertxup:vertx-co 0.4.9 - cn.vertxup:vertx-ifx 0.4.9 - cn.vertxup:vertx-import 0.4.9 - cn.vertxup:vertx-rx 0.4...

com.hazelcast.jet:hazelcast-jet-client-protocol (0.6.1), com.hazelcast.jet:hazelcast-jet-core (0.6.1) +47 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.10)

com.hazelcast:hazelcast MAVEN version 3.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-client-protocol 0.6.1 - com.hazelcast.jet:hazelcast-jet-core 0.6.1 -...

GHSA-XH6M-7CR7-XX66 Missing permission checks on Hazelcast client protocol

Impact In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster. Patches Fix versions: 5.2.5, 5.3.5,...

com.hazelcast:hazelcast-client (3.3), com.hazelcast:hazelcast-cloud (3.3) +16 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.3)

com.hazelcast:hazelcast MAVEN version 3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3 - com.hazelcast:hazelcast-cloud 3.3 - com.hazelcast:hazelcast-hibernate 3.3 -...

com.hazelcast:hazelcast-all (1.9.4.2), com.hazelcast:hazelcast-client (1.9.4.2) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.9.4.2)

com.hazelcast:hazelcast MAVEN version 1.9.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4.2 - com.hazelcast:hazelcast-client 1.9.4.2 - com.hazelcast:hazelcast-cloud...

cn.vertxup:vertx-co (0.5), cn.vertxup:vertx-import (0.5) +37 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.12.1)

com.hazelcast:hazelcast MAVEN version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - cn.vertxup:vertx-co 0.5 - cn.vertxup:vertx-import 0.5 - cn.vertxup:vertx-pin 0.5 - cn.vertxup:vertx-rx 0.5 -...