CVE-2016-10750

In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization

published May 22, 2019

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03951 · 90.4th percentile
Published
2019-05-22T13:40Z
EPSS history
Timeline
  • 22 MAY 13:40Z
    In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization
    cvelistv5