Em resumo
- CVE-2023-33264 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta com.hazelcast:hazelcast, hazelcast (hazelcast).
- Chance de exploração nos próximos 30 dias (EPSS): 0.72%, maior que 54.0% das vulnerabilidades.
- Correção: atualize para 5.0.5, 5.1.6, 5.2.4, 5.3.0 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| com.hazelcast:hazelcast Maven | ≥ 4.0-BETA-1, ≤ 4.2.8≥ 5.0-BETA-1, < 5.0.5≥ 5.1-BETA-1, < 5.1.6≥ 5.2-BETA-1, < 5.2.4≥ 5.3.0-BETA-1, < 5.3.0
| 5.0.55.1.65.2.45.3.0
|
| hazelcast | ≥ 5.1, < 5.1.6≥ 5.2, ≤ 5.2.3≤ 5.0.4
| 5.1.6
|
Description
In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
NVD description
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
Mais vulnerabilidades de com.hazelcast:hazelcast
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free