Approved changes feed: RSS · Atom

cpe:2.3:a:hazelcast:management_center:*:*:*:*:-:*:*:*

part: a version: * update: *

VendorHazelcast (188878da-4b2c-52f5-8267-7bd4410c9d5a)
ProductManagement Center (434cb448-9cfc-5929-a53e-9c9b139472e0)
Edition*
Language*
Software edition-
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/hazelcast/management-center-docker purl2cpe 2026-06-01 10:11:14.718100

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-56518 vulnerable 2026-06-08 06:56:12.739413 Details available
Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document (aka a client configuration file), which can be uploaded at the /cluster-connections URI.
Published: 2025-04-17T00:00:00.000Z
Updated: 2025-04-22T14:34:31.303Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.