CVE-2020-26168

Mô tả

Tham khảo

• docs.hazelcast.org/docs/ern/index.html · Release Notes
• hazelcast.zendesk.com/hc/en-us/articles/360050161951--IMDG-Enterprise-4-0-4-0-1-4-0-2-LDAP-Authentication-Bypass · Vendor Advisory
• hazelcast.zendesk.com/hc/en-us/articles/360051384932--JET-Enterprise-4-0-4-1-4-1-1-4-2-LDAP-Authentication-Bypass · Vendor Advisory
• jet-start.sh/blog/2020/10/23/jet-43-is-released · Vendor Advisory

Lỗ hổng khác của hazelcast

• CVE-2023-45859CAO 7.6In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client …
• CVE-2023-45860TRUNG BÌNH 6.5In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises fro…
• CVE-2023-33265CAO 8.8In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions properly, allowing au…
• CVE-2023-33264TRUNG BÌNH 4.3In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuratio…
• CVE-2022-36437NGHIÊM TRỌNG 9.1The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate data in the cluster …