Nov 2, 2023
0 new incidents, 1 with updates.
Updated
- ClosedPatched
Apache ActiveMQ OpenWire RCE exploited for HelloKitty ransomware (CVE-2023-46604)
A deserialization flaw in ActiveMQ's Java OpenWire protocol marshaller let anyone who could reach a broker run shell commands on it. Within days of the fix, attackers were deploying HelloKitty ransomware through it.
Apache ActiveMQ (Java OpenWire brokers and clients)Closed Nov 2, 2023