Remote Code Execution Vulnerability in Hazelcast Management Center
CVE-2024-56518

9.8CRITICAL

Key Information:

Vendor

Hazelcast

Status
Hazelcast Management Center
Vendor
CVE Published:
17 April 2025

What is CVE-2024-56518?

A vulnerability exists in the Hazelcast Management Center that allows attackers to execute arbitrary code remotely. This occurs when a specially crafted JndiLoginModule user.provider.url is included in a hazelcast-client XML document, which is stored improperly in the server. By exploiting this flaw, an attacker can upload a malicious client configuration file via the /cluster-connections endpoint, potentially compromising the system and leading to unauthorized access.

References

https://docs.hazelcast.com/management-center/6.0-snapshot...
https://gist.github.com/azraelxuemo/c3d42739aa3306a41111e...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.