CVE-2024-56518

Hazelcast Management Center versions prior to 6.0 are vulnerable to remote code execution (RCE) . The root cause is a configuration flaw involving the JndiLoginModule user.provider.url within a hazelcast-client XML document . An attacker can exploit this by uploading a malicious client configurat...