Information Disclosure

Hazelcast is vulnerable to Information Disclosure. The vulnerability exists in the equals function of TcpServerConnection.java which allows unauthenticated attackers to use another user's authenticated connection to read and modify data in the cluster...