VULNERABILITY INTELLIGENCE
CVE-2023-33264
CVSS score4.3 MEDIUM
EPSS probability0.72%
CISA KEVNot currently listed
Published2023-05-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
Weakness classification
- nvd@nist.gov: CWE-522
Primary references
- cve@mitre.org — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Patch