ID CVE-2016-10750
Summary In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary code.
References
Vulnerable Configurations
  • cpe:2.3:a:hazelcast:hazelcast:1.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:1.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:1.9.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:1.9.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:1.9.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:1.9.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:1.9.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:1.9.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:1.9.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:1.9.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:1.9.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:1.9.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:1.9.4.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:1.9.4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:1.9.4.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:1.9.4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:1.9.4.6:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:1.9.4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:1.9.4.8:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:1.9.4.8:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:1.9.4.9:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:1.9.4.9:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.5:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.6:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.6.7:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.6.8:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.6.9:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.6.9:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:2.6.10:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:2.6.10:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.0:-:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.0:-:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.1.8:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.2:-:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.2:-:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.2:rc2:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.2:rc2:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.2.7:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.2.7:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.3:-:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.3:-:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.3:rc2:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.3:rc2:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.3:rc3:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.3:rc3:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.3.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.3.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.3.5:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.3.6:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.3.6:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.4.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.4.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.4.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.4.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.4.5:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.4.6:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.4.7:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.4.7:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.4.8:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.4.8:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.5:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.6:-:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.6:-:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.6:rc2:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.6:rc2:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.6.7:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.6.8:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.7:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.7:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.7.6:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.7.6:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.7.7:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.7.7:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.7.8:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.7.8:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.8:-:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.8:-:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.8:rc1:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.8:rc1:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.8.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.8.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.8.5:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.8.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.8.6:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.8.6:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.8.7:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.8.7:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.8.8:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.8.8:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.8.9:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.8.9:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.9:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.9:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.9.4:-:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.9.4:-:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.9.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.9.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.10:-:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.10:-:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.10:beta1:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.10:beta1:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.10:beta2:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.10:beta2:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.10.1:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.10.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.10.2:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.10.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.10.3:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.10.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.10.4:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.10.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.10.5:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.10.5:*:*:*:*:*:*:*
  • cpe:2.3:a:hazelcast:hazelcast:3.10.6:*:*:*:*:*:*:*
    cpe:2.3:a:hazelcast:hazelcast:3.10.6:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 08-08-2019 - 13:15)
Impact:
Exploitability:
CWE CWE-502
CAPEC
  • Object Injection
    An adversary attempts to exploit an application by injecting additional, malicious content during its processing of serialized objects. Developers leverage serialization in order to convert data or state into a static, binary format for saving to disk or transferring over a network. These objects are then deserialized when needed to recover the data/state. By injecting a malformed object into a vulnerable application, an adversary can potentially compromise the application by manipulating the deserialization process. This can result in a number of unwanted outcomes, including remote code execution.
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
redhat via4
advisories
rhsa
id RHSA-2019:2413
refmap via4
misc
Last major update 08-08-2019 - 13:15
Published 22-05-2019 - 14:29
Last modified 08-08-2019 - 13:15
Back to Top