CVE-2023-33264
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
In Hazelcast versions 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines do not properly mask passwords in member configuration, allowing Hazelcast Management Center users to view some secrets.
Risk Assessment
The organization may be exposed to the disclosure of sensitive information, potentially leading to unauthorized access to systems.
Recommendation
It is recommended to upgrade to the latest version of Hazelcast where the issue has been fixed, and to review and secure password configurations.
Original NVD description (English source)
In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.