Approved changes feed: RSS · Atom

cpe:2.3:a:hazelcast:jet:*:*:*:*:enterprise:*:*:*

part: a version: * update: *

VendorHazelcast (188878da-4b2c-52f5-8267-7bd4410c9d5a)
ProductJet (bdd742ff-9c85-57c1-8be1-96ab71ff8385)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/hazelcast/hazelcast-jet purl2cpe 2026-06-01 10:11:14.558291
pkg:github/hazelcast/hazelcast-jet purl2cpe 2026-06-01 10:11:14.558294
pkg:golang/github.com/hazelcast/hazelcast-jet purl2cpe 2026-06-01 10:11:14.558297

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-26168 vulnerable 2026-06-08 05:23:50.761626 Details available
The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise 4.x before 4.0.3, and Jet Enterprise 4.x through 4.2, doesn't verify properly the password in some system-user-dn scenarios. As a result, users (clients/members) can be authenticated even if they provide invalid passwords.
Published: 2020-11-09T21:28:39.000Z
Updated: 2024-08-04T15:49:07.227Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.