Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
ActiveMQ OpenWire RCE (CVE-2023-46604) - Vulnerability Database

ActiveMQ OpenWire RCE (CVE-2023-46604)

Description

ActiveMQ has an OpenWire-protocol broker on TCP port 61616. It allows unauthenticated attackers to manipulate serialized class types leading to arbitrary code execution.

Remediation

Upgrade to the latest version of ActiveMQ

References

Update on CVE-2023-46604

Related Vulnerabilities

Kentico CMS Deserialization RCE High
Common tags: Insecure Deserialization Acumonitor
Deserialization of Untrusted Data (Java JSON Deserialization) Genson High
Common tags: Insecure Deserialization Acumonitor
Oracle ADF Faces 'Miracle' RCE (CVE-2022-21445) High
Common tags: Insecure Deserialization Acumonitor
ColdFusion WDDX Deserialization RCE (CVE-2023-29300/CVE-2023-38203/CVE-2023-38204) Critical
Common tags: Insecure Deserialization Acumonitor
Flex BlazeDS AMF Deserialization RCE High
Common tags: Insecure Deserialization Acumonitor

Severity

Critical

Classification

CVE-2023-46604
CWE-502
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H

Tags

Insecure Deserialization
Acumonitor