Read the docs
Red Hat Security Advisory

RHSA-2023:0661

Red Hat Fuse 7.11.1.P1 security update for Fuse on EAP

Released 2023-02-08 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 49

The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate data in the cluster with the identity of another already authenticated connection.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01088 Published 2022-12-29 Partial fix · 3.12.13, 4.1.10 +4 CWE-384