Apache Activemq Legacy Openwire Module vulnerabilities

1 known vulnerability affecting apache/activemq_legacy_openwire_module.

Total CVEs

1

CISA KEV

1

actively exploited

Public exploits

1

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2023-46604CRITICALCVSS 9.8KEVPoCfixed in 5.15.16≥ 5.16.0, < 5.16.7+2 more2023-10-27

CVE-2023-46604 [CRITICAL] CWE-502 CVE-2023-46604: The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability ma The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to