CVE-2023-33264

A flaw was found in Hazelcast. Configuration routines do not mask the password in the member configuration properly, which may allow Hazelcast Management Center users to view some of the secrets...

cloud.piranha.extension:piranha-extension-hazelcast (=23.5.0), com.github.ben-manes.caffeine:simulator (=3.1.6) +31 more potentially affected by CVE-2023-33264 via com.hazelcast:hazelcast (>=5.3.0-BETA-1 <=5.3.0-BETA-2)

com.hazelcast:hazelcast MAVEN version =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-1, =5.3.0-BETA-2 and more Source cves: CVE-2023-33264 Source...

cloud.piranha.extension:piranha-extension-hazelcast (>=22.12.0 <=23.4.0), cloud.piranha:debug (>=22.12.0 <=23.1.0) +202 more potentially affected by CVE-2023-33264 via com.hazelcast:hazelcast (>=5.2-BETA-1 <=5.2.3)

com.hazelcast:hazelcast MAVEN version =5.2-BETA-1, =22.12.0, =22.12.0, =23.1.0 - cn.vertxup:aeon-ambient =0.9.0 - cn.vertxup:aeon-aurora =0.9.0 - cn.vertxup:aeon-code =0.9.0 - cn.vertxup:aeon-cosmos =0.9.0 - cn.vertxup:aeon-ecology =0.9.0 - cn.vertxup:aeon-edge =0.9.0 - cn.vertxup:aeon-eternal...

cloud.piranha.extension:piranha-extension-hazelcast (>=22.5.0 <=22.11.0), cloud.piranha:debug (>=22.5.0 <=22.11.0) +142 more potentially affected by CVE-2023-33264 via com.hazelcast:hazelcast (>=5.1-BETA-1 <=5.1.5)

com.hazelcast:hazelcast MAVEN version =5.1-BETA-1, =22.5.0, =22.5.0, =8.1.1, =8.2.0, =5.1.15, =5.1.15, =1.40.0, =0.7.0, =1.1.8, =1.1.8, =1.1.8, =1.1.8, =1.1.15 - com.gitee.kamismile:gatewayweb =1.2.8 and more Source cves: CVE-2023-33264 Source advisory: OSV:GHSA-5GJ6-62G7-VMGF...

cloud.piranha.extension:piranha-extension-hazelcast (=22.2.0), cn.vertxup:infix-mysql (=0.8.1) +113 more potentially affected by CVE-2023-33264 via com.hazelcast:hazelcast (>=5.0-BETA-1 <=5.0.4)

com.hazelcast:hazelcast MAVEN version =5.0-BETA-1, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.8.1 and more Source cves: CVE-2023-33264 Source advisory: OSV:GHSA-5GJ6-62G7-VMGF...

CVE-2023-33264

CVE-2023-33264 affects Hazelcast through 5.0.4, 5.1–5.1.6, and 5.2–5.2.3, where configuration routines do not mask passwords in the member configuration, allowing Hazelcast Management Center users to view some secrets. Multiple connected sources confirm impact on Hazelcast and variants of product...

CVE-2023-33264

In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...