Published: 22/05/2023 Updated: 02/06/2023

CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8

VMScore: 0

In Hazelcast up to and including 5.0.4, 5.1 up to and including 5.1.6, and 5.2 up to and including 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hazelcast hazelcast

DescriptionA flaw was found in Hazelcast Configuration routines do not mask the password in the member configuration properly, which may allow Hazelcast Management Center users to view some of the secretsA flaw was found in Hazelcast Configuration routines do not mask the password in the member configuration properly, which may allow Haze ...

Demo app Swagger URL: localhost:8080/swagger-ui/indexhtml TODO: Update Spring Boot Starter Parent 314 ASAP to fix vulnerabilities from dependencies: CVE-2023-33264 CVE-2023-26119 CVE-2022-45868 CVE-2022-1471 More info: mvnrepositorycom/artifact/orgspringframeworkboot/spring-boot-starter-parent/314

CVE-2023-33264-3

CVE-2023-33264-1

CVE-2023-33264-2

CWE-522 https://github.com/hazelcast/hazelcast/pull/24266 https://nvd.nist.gov https://github.com/PeterXMR/Demo https://access.redhat.com/security/cve/cve-2023-33264

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-33264

Vulnerability Summary

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect