CVE-2020-26168

概要

参考情報

• docs.hazelcast.org/docs/ern/index.html · Release Notes
• hazelcast.zendesk.com/hc/en-us/articles/360050161951--IMDG-Enterprise-4-0-4-0-1-4-0-2-LDAP-Authentication-Bypass · Vendor Advisory
• hazelcast.zendesk.com/hc/en-us/articles/360051384932--JET-Enterprise-4-0-4-1-4-1-1-4-2-LDAP-Authentication-Bypass · Vendor Advisory
• jet-start.sh/blog/2020/10/23/jet-43-is-released · Vendor Advisory

hazelcast のその他の脆弱性

• CVE-2023-45859高 7.6In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client …
• CVE-2023-45860中 6.5In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises fro…
• CVE-2023-33265高 8.8In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions properly, allowing au…
• CVE-2023-33264中 4.3In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuratio…
• CVE-2022-36437緊急 9.1The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate data in the cluster …