CVE-2023-33264
First published: Mon May 22 2023(Updated: )
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hazelcast Hazelcast | <=5.0.4 | |
| Hazelcast Hazelcast | >=5.1<5.1.6 | |
| Hazelcast Hazelcast | >=5.2<=5.2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-33264?
CVE-2023-33264 is a vulnerability in Hazelcast that allows Hazelcast Management Center users to view some of the secrets due to improper masking of passwords in the member configuration.
How severe is CVE-2023-33264?
CVE-2023-33264 has a severity rating of 4.3, which is considered medium.
Which software versions are affected by CVE-2023-33264?
CVE-2023-33264 affects Hazelcast versions 5.0.4 up to and inclusive of 5.2.3.
How can I fix CVE-2023-33264?
To fix CVE-2023-33264, upgrade Hazelcast to version 5.3.0 or later.
Where can I find more information about CVE-2023-33264?
You can find more information about CVE-2023-33264 on the NIST National Vulnerability Database website.
- collector/nvd-cve
- collector/nvd-index
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- vendor/hazelcast
- canonical/hazelcast hazelcast
- version/hazelcast hazelcast/5.0.4
- version/hazelcast hazelcast/5.1
- version/hazelcast hazelcast/5.2
- version/hazelcast hazelcast/5.2.3