hazelcast

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

hazelcast records in CISA KEV

No hazelcast vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hazelcast 8 records MEDIUM Hazelcast-jet 1 record MEDIUM Imdg 1 record MEDIUM Jet 1 record MEDIUM Management Center 1 record MEDIUM

Records

1 record in Jet · all components

TI-2020-16001 CVE-2020-26168 · GHSA-whg4-vj5j-j9x2

The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise 4.x before…

MEDIUM 45

The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise 4.x before 4.0.3, and Jet Enterprise 4.x through 4.2, doesn't verify properly the password in some system-user-dn scenarios.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01596 Published 2020-11-09 No fix listed CWE-287

Open these records in search →

Critical	5
High	4
Medium	2
Low	0
No CVSS	0