ClosedPatched
Day · Oct 27, 2023
Apache ActiveMQ OpenWire RCE exploited for HelloKitty ransomware (CVE-2023-46604)
Apache ActiveMQ (Java OpenWire brokers and clients)
Updates on Oct 27, 2023
Apache publishes the CVE-2023-46604 announcement; fixed releases already out
Source
Summary
A deserialization flaw in ActiveMQ's Java OpenWire protocol marshaller let anyone who could reach a broker run shell commands on it. Within days of the fix, attackers were deploying HelloKitty ransomware through it.
Read the full incident →
