Threat intelligence / Vulnerability
CVE-2023-46604
Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.
Vulnerability
TypeVulnerability
External ID—
First seen2023-11-02
Last seen2023-11-02
Confidence
—
Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.
Labels
CISA KEV context
Vendor / productApache ActiveMQ
Added2023-11-02
Due date2023-11-23
2 recorded
Relationships
2 external