Apache Software Foundation Apache Activemq Legacy Openwire Module vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_activemq_legacy_openwire_module.

Total CVEs

1

CISA KEV

1

actively exploited

Public exploits

1

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2023-46604CRITICALCVSS 9.8KEVPoC≥ 5.18.0, < 5.18.3≥ 5.17.0, < 5.17.6+2 more2023-10-27

CVE-2023-46604 [CRITICAL] CWE-502 CVE-2023-46604: The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability ma The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to