Beveiligingsadvies

CVE-2016-10750

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-05-22 13:40:06
Laatst bijgewerkt 2024-08-06 03:30:20
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary code.