CVE-2024-56518

Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document aka a client configuration file, which can be uploaded at the /cluster-connections URI...

GHSA-XH6M-7CR7-XX66 Missing permission checks on Hazelcast client protocol

Impact In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster. Patches Fix versions: 5.2.5, 5.3.5,...

Security Bulletin: Security Vulnerabilities in hazelcast client affect IBM Voice Gateway

Summary Security Vulnerabilities in hazelcast client affect IBM Voice Gateway Vulnerability Details CVEID:CVE-2023-33264 DESCRIPTION: Hazelcast could allow a remote authenticated attacker to obtain sensitive information, caused by not masking the passwords in the member configuration. By sending ...

com.hazelcast:hazelcast-all (2.0-rc2), com.hazelcast:hazelcast-client (2.0-rc2) +5 more potentially affected by CVE-2016-10750 via com.hazelcast:hazelcast (2.0-rc2)

com.hazelcast:hazelcast MAVEN version 2.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.0-rc2 - com.hazelcast:hazelcast-client 2.0-rc2 - com.hazelcast:hazelcast-cloud...

com.hazelcast:hazelcast-all (2.0), com.hazelcast:hazelcast-client (2.0) +5 more potentially affected by CVE-2016-10750 via com.hazelcast:hazelcast (2.0)

com.hazelcast:hazelcast MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 2.0 - com.hazelcast:hazelcast-client 2.0 - com.hazelcast:hazelcast-cloud 2.0 -...

com.hazelcast:hazelcast-all (1.9.4-rc1), com.hazelcast:hazelcast-client (1.9.4-rc1) +5 more potentially affected by CVE-2016-10750 via com.hazelcast:hazelcast (1.9.4-rc1)

com.hazelcast:hazelcast MAVEN version 1.9.4-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.9.4-rc1 - com.hazelcast:hazelcast-client 1.9.4-rc1 -...

com.hazelcast:hazelcast-client (1.8.2), com.hazelcast:hazelcast-hibernate (1.8.2) +3 more potentially affected by CVE-2016-10750 via com.hazelcast:hazelcast (1.8.2)

com.hazelcast:hazelcast MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 1.8.2 - com.hazelcast:hazelcast-hibernate 1.8.2 - com.hazelcast:hazelcast-monitor...