com.hazelcast:hazelcast-client (3.4-ea), com.hazelcast:hazelcast-cloud (3.4-ea) +6 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.4-ea)

com.hazelcast:hazelcast MAVEN version 3.4-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.4-ea - com.hazelcast:hazelcast-cloud 3.4-ea - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-build-utils (3.10.3), com.hazelcast:hazelcast-client (3.10.3) +1 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.10.3)

com.hazelcast:hazelcast MAVEN version 3.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.10.3 - com.hazelcast:hazelcast-client 3.10.3 -...

com.airhacks:jc2 (>=0.0.1, <=0.0.2), com.airhacks:jc2-env-vars (0.0.2) +29 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.5.4)

com.hazelcast:hazelcast MAVEN version 3.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.airhacks:jc2 =0.0.1, =0.0.7, =1.0.1, =1.0.2 - com.github.kucera-jan-cz.esbench:elastic-module 0.0.3 -...

com.hazelcast:hazelcast-client (3.3.5), com.hazelcast:hazelcast-cloud (3.3.5) +12 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.3.5)

com.hazelcast:hazelcast MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.5 - com.hazelcast:hazelcast-cloud 3.3.5 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-all (1.9.2.3), com.hazelcast:hazelcast-client (1.9.2.3) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.9.2.3)

com.hazelcast:hazelcast MAVEN version 1.9.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.2.3 - com.hazelcast:hazelcast-client 1.9.2.3 - com.hazelcast:hazelcast-hibernat...

com.consol.citrus:citrus-vertx (>=3.0.0-m1, <=3.4.1), com.erudika:para-cache-hazelcast (1.33.0) +72 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.12.2)

com.hazelcast:hazelcast MAVEN version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.consol.citrus:citrus-vertx =3.0.0-m1, =0.6.4, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =0.4.4, =0.11.4, =0.5.4, =0.6....

cn.vertxup:vertx-co (>=0.4.7, <=0.4.7.1), cn.vertxup:vertx-import (>=0.4.7, <=0.4.7.1) +51 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.9.3)

com.hazelcast:hazelcast MAVEN version 3.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - cn.vertxup:vertx-co =0.4.7, =0.4.7, =0.4.7, =0.4.7, =0.4.7, =0.1.2, =1.0.0, =1.0.2, =1.1.2 -...

com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.4-release, <=1.1.9-release), com.erudika:para-server (1.20.0) +46 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.6.4)

com.hazelcast:hazelcast MAVEN version 3.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.ahome-it:ahome-tooling-server-hazelcast =1.1.4-release, =0.9-rc1, =0.9.9 - com.hazelcast:hazelcast-build-util...

com.hazelcast:hazelcast-client (3.0-rc1), com.hazelcast:hazelcast-cloud (3.0-rc1) +5 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.0-rc1)

com.hazelcast:hazelcast MAVEN version 3.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.0-rc1 - com.hazelcast:hazelcast-cloud 3.0-rc1 -...

com.nannoq:auth (>=1.0.0, <=1.0.4), org.rapidpm.microservice:rapidpm-microservice-modules-hazelcast (>=0.7.0, <=1.1.0) +1 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (3.8)

com.hazelcast:hazelcast-all MAVEN version 3.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast-all and may be impacted: - com.nannoq:auth =1.0.0, =0.7.0, =0.7.0, =1.1.0 Source cves: CVE-2023-45859 Source advisory:...

com.hazelcast:hazelcast-all (1.8.5), com.hazelcast:hazelcast-client (1.8.5) +10 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.8.5)

com.hazelcast:hazelcast MAVEN version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.8.5 - com.hazelcast:hazelcast-client 1.8.5 - com.hazelcast:hazelcast-hibernate 1.8....

com.graphaware.neo4j:server (3.1.0.44), com.graphaware.neo4j:tests (3.1.0.44) +10 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (3.7.2)

com.hazelcast:hazelcast-all MAVEN version 3.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast-all and may be impacted: - com.graphaware.neo4j:server 3.1.0.44 - com.graphaware.neo4j:tests 3.1.0.44 -...

org.apache.karaf.cellar.samples:hazelcast-app (4.0.0), org.apache.karaf.cellar:org.apache.karaf.cellar.hazelcast (4.0.0) potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (3.5.2)

com.hazelcast:hazelcast-all MAVEN version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast-all and may be impacted: - org.apache.karaf.cellar.samples:hazelcast-app 4.0.0 -...

com.jwebmp:guiced-hazelcast (>=0.65.0.2, <=0.66.0.1) potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (3.11.2)

com.hazelcast:hazelcast-all MAVEN version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast-all and may be impacted: - com.jwebmp:guiced-hazelcast =0.65.0.2, =0.66.0.1 Source cves: CVE-2023-45859 Source advisory:...

com.hazelcast:hazelcast-build-utils (3.4.7), com.hazelcast:hazelcast-client (3.4.7) +7 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.4.7)

com.hazelcast:hazelcast MAVEN version 3.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.4.7 - com.hazelcast:hazelcast-client 3.4.7 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-client (3.3.2), com.hazelcast:hazelcast-cloud (3.3.2) +8 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.3.2)

com.hazelcast:hazelcast MAVEN version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.2 - com.hazelcast:hazelcast-cloud 3.3.2 - com.hazelcast:hazelcast-hibernate...

com.orientechnologies:orientdb-community (>=2.1.6, <=2.1.25), com.orientechnologies:orientdb-distributed (>=2.1.6, <=2.1.25) potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (3.5.3)

com.hazelcast:hazelcast-all MAVEN version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast-all and may be impacted: - com.orientechnologies:orientdb-community =2.1.6, =2.1.6, =2.1.25 Source cves: CVE-2023-45859 Source...

com.expedia.dsp:circus-train-datasqueeze (1.0), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=0.0.10, <=0.0.15) +35 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (3.5.5)

com.hazelcast:hazelcast MAVEN version 3.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.expedia.dsp:circus-train-datasqueeze 1.0 - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter...

PT-2024-13294 · Atlassian +1 · Confluence Data Center/Server +4

Name of the Vulnerable Software and Affected Versions: Hazelcast versions 4.1.10 and earlier, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2 Bitbucket Data Center and Server versions 7.21.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.7.0, 8.8.0, 8.9.0, 8.10.0...

Improper Authorization

com.hazelcast:hazelcast is vulnerable to Improper Authorization. The issue exists within the SQL mapping for the CSV File Source connector. The vulnerability is due to inadequate permission checking, allowing unauthorized clients to access data from files stored on a member's filesystem. Attacker...