In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4,
    and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated
    users to access data stored in the cluster. (CVE-2023-45859)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-98713 advisory.

  - In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4,     and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated     users to access data stored in the cluster. (CVE-2023-45859)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Atlassian Confluence Server running on the remote host is affected by a missing permission check vulnerability as referenced in the CONFSERVER-95839 advisory.

  - In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4,     and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated     users to access data stored in the cluster. (CVE-2023-45859)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
420515	SCA: security update for com.hazelcast:hazelcast (GHSA-xh6m-7cr7-xx66)	Tenable Cloud Security	SCA Checks	high
420515	SCA: security update for com.hazelcast:hazelcast (GHSA-xh6m-7cr7-xx66)	Tenable Self-Hosted Container Security	SCA Checks	high
213296	Atlassian Confluence 3.7.x < 7.19.22 / 7.20.x < 8.5.9 / 8.6.x < 8.9.0 / 9.2.0 (CONFSERVER-98713)	Nessus	CGI abuses	high
197937	Atlassian Confluence 5.5 < 7.19.22 / 7.20.x < 8.5.9 / 8.6.x < 8.9.0 MPC (CONFSERVER-95839)	Nessus	CGI abuses	high

Detections

Analytics

CVE-2023-45859

high

Tenable Plugins

high

high

high

high