MEDIUM 4.3 Maven
Hazelcast vulnerable to unmasked password exposure
GHSA-5gj6-62g7-vmgf · CVE-2023-33264
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-33264
- WEB https://github.com/hazelcast/hazelcast/pull/24266
- WEB https://github.com/hazelcast/hazelcast/pull/24266/commits/80a502d53cc48bf895711ab55f95e3a51e344ac1
- WEB https://github.com/hazelcast/hazelcast/commit/74eed86c2b2b727148c442e98a01d0ca6941a49e
- PACKAGE https://github.com/hazelcast/hazelcast
Ready to move
Start Securing
Free, no credit card | First findings in minutes