ClosedCriticalPatched
Apache ActiveMQ OpenWire RCE exploited for HelloKitty ransomware (CVE-2023-46604)
Apache ActiveMQ (Java OpenWire brokers and clients)
A deserialization flaw in ActiveMQ's Java OpenWire protocol marshaller let anyone who could reach a broker run shell commands on it. Within days of the fix, attackers were deploying HelloKitty ransomware through it.
Why this severity: CVSS 9.8 (NVD), actively exploited (CISA KEV), known ransomware use
- Started
- Oct 27, 2023
- Closed
- Nov 2, 2023
Affected
- See vendor advisory
Fixed in
- 5.15.16
- 5.16.7
- 5.17.6
- 5.18.3
Updates by day3
Advisories3
News & write-ups1
Get an email when a new major security incident drops. No spam, unsubscribe any time.
