CVE-2023-45859

In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster...

EUVD-2023-1474

Malicious code in bioql PyPI...

EUVD-2022-4434

Malicious code in bioql PyPI...

EUVD-2022-7594

Malicious code in bioql PyPI...

PT-2024-13294 · Atlassian +1 · Confluence Data Center/Server +4

Name of the Vulnerable Software and Affected Versions: Hazelcast versions 4.1.10 and earlier, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2 Bitbucket Data Center and Server versions 7.21.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.7.0, 8.8.0, 8.9.0, 8.10.0...

Improper Authorization

com.hazelcast:hazelcast is vulnerable to Improper Authorization. The issue exists within the SQL mapping for the CSV File Source connector. The vulnerability is due to inadequate permission checking, allowing unauthorized clients to access data from files stored on a member's filesystem. Attacker...

GHSA-5GJ6-62G7-VMGF Hazelcast vulnerable to unmasked password exposure

In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets...

Hazelcast 安全漏洞

Hazelcast Hazelcast IMDG is a set of scalable open source data distribution platform of the U.S. Hazelcast company . The platform supports a variety of distributed data structures , support for distributed caching and other features . A security vulnerability exists in Hazelcast versions 5.0.4 an...

PT-2023-7546 · Hazelcast · Hazelcast

Name of the Vulnerable Software and Affected Versions: Hazelcast versions 5.0.0 through 5.0.4 Hazelcast versions 5.1.0 through 5.1.6 Hazelcast versions 5.2.0 through 5.2.3 Description: The issue is related to insufficient protection of registration data in the Hazelcast platform, which can be...

Vulnerability fixed in Red Hat Fuse

Red Hat has fixed a vulnerability in Fuse 7. The vulnerability is located in the Hazelcast integrated in Fuse Connection Cache and allows an unauthenticated malicious agent to able to manipulate data in the cluster without prior authentication or authorization. Red Hat has released updates to fix...

CVE-2022-36437

The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate data in the cluster with the identity of another already authenticated connection. The affected Hazelcast versions are through 4.0.6, 4.1.9, 4.2.5, 5.0.3, and 5.1.2. The affecte...

RCE in Confluence DataCenter via HazelCast(Confluence) Port

Summary A remote attacker who can connect to the Hazelcast service, running on port 5801 and potentially 5701, is able to execute arbitrary code on all the nodes in a Confluence Data Center through Java deserialization. Vulnerability Details Confluence Data Center uses the third-party software...

The vulnerability of the Hazelcast platform, a software product for data processing, in the Atlassian Bitbucket Data Center allows a perpetrator to execute arbitrary code.

The vulnerability of the Hazelcast platform, a software product for data processing, in the Atlassian/Bitbucket Data Center environment, relates to the restoration of unreliable data in memory. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...