| Package | Affected versions | Patched versions |
|---|---|---|
| com.hazelcast:hazelcast | ≥ 4.0-BETA-1, ≤ 4.2.8≥ 5.0-BETA-1, < 5.0.5≥ 5.1-BETA-1, < 5.1.6≥ 5.2-BETA-1, < 5.2.4≥ 5.3.0-BETA-1, < 5.3.0 | 5.0.55.1.65.2.45.3.0 |
| hazelcast | ≥ 5.1, < 5.1.6≥ 5.2, ≤ 5.2.3≤ 5.0.4 | 5.1.6 |
In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free