Homepage

com.hazelcast:hazelcast-sql@5.0.4 vulnerabilities

  • latest version

    5.5.0

  • latest non vulnerable version

    5.5.0

  • first published

    4 years ago

  • latest version published

    4 months ago

  • licenses detected

  • package manager

    View on Maven Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the com.hazelcast:hazelcast-sql package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Improper Authorization

    Affected versions of this package are vulnerable to Improper Authorization due to missing permission checks on the Hazelcast client protocol. Authenticated users can access data stored in the cluster by exploiting this oversight.

    How to fix Improper Authorization?

    Upgrade com.hazelcast:hazelcast-sql to version 5.2.5, 5.3.5 or higher.

    [,5.2.5)[5.3.0,5.3.5)
    • M
    Improper Access Control

    Affected versions of this package are vulnerable to Improper Access Control due to inadequate permission checking, within the SQL mapping for the CSV File Source connector. This could enable unauthorized clients to access data from files stored on a member's filesystem.

    How to fix Improper Access Control?

    Upgrade com.hazelcast:hazelcast-sql to version 5.2.5, 5.3.5 or higher.

    [,5.2.5)[5.3.0,5.3.5)
    Go back to all versions of this package