Lucene search

CVE-2023-46604

🗓️ 27 Oct 2023 15:14:15Reported by apacheType

cve🔗 web.nvd.nist.gov👁 525 Views🌐 45 Media mentions

Java OpenWire protocol marshaller vulnerability, allows remote code execution by manipulating serialized class type

Reporter	Title	Published	Views	Family All 100
AttackerKB	CVE-2023-46604	27 Oct 202300:00	–	attackerkb
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Activemq	27 Oct 202312:22	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Activemq	31 May 202400:38	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Activemq	4 Nov 202311:58	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Activemq	9 Dec 202319:19	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Activemq	8 Nov 202307:48	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Activemq	23 Dec 202308:41	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Activemq	16 Oct 202403:31	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Activemq	12 Nov 202311:26	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Activemq	17 Apr 202413:10	–	githubexploit

Nvd

Vulners

Node

apache activemqRange<5.15.16

apache activemqRange5.16.0–5.16.7

apache activemqRange5.17.0–5.17.6

apache activemqRange5.18.0–5.18.3

Node

apache activemq_legacy_openwire_moduleRange<5.15.16

apache activemq_legacy_openwire_moduleRange5.16.0–5.16.7

apache activemq_legacy_openwire_moduleRange5.17.0–5.17.6

apache activemq_legacy_openwire_moduleRange5.18.0–5.18.3

Node

debian debian_linuxMatch10.0

Node

netapp e-series_santricity_unified_managerMatch-

netapp e-series_santricity_web_services_proxyMatch-

netapp santricity_storage_pluginMatch-vcenter

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.activemq:activemq-client",
    "product": "Apache ActiveMQ",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "5.18.3",
        "status": "affected",
        "version": "5.18.0",
        "versionType": "semver"
      },
      {
        "lessThan": "5.17.6",
        "status": "affected",
        "version": "5.17.0",
        "versionType": "semver"
      },
      {
        "lessThan": "5.16.7",
        "status": "affected",
        "version": "5.16.0",
        "versionType": "semver"
      },
      {
        "lessThan": "5.15.16",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.activemq:activemq-openwire-legacy",
    "product": "Apache ActiveMQ Legacy OpenWire Module",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "5.18.3",
        "status": "affected",
        "version": "5.18.0",
        "versionType": "semver"
      },
      {
        "lessThan": "5.17.6",
        "status": "affected",
        "version": "5.17.0",
        "versionType": "semver"
      },
      {
        "lessThan": "5.16.7",
        "status": "affected",
        "version": "5.16.0",
        "versionType": "semver"
      },
      {
        "lessThan": "5.15.16",
        "status": "affected",
        "version": "5.8.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20231110-0010/
seclists	www.seclists.org/fulldisclosure/2024/Apr/18
openwall	www.openwall.com/lists/oss-security/2023/10/27/5
lists	www.lists.debian.org/debian-lts-announce/2023/11/msg00013.html
activemq	www.activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txt
packetstormsecurity	www.packetstormsecurity.com/files/175676/Apache-ActiveMQ-Unauthenticated-Remote-Code-Execution.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Oct 2023 15:15Current

9.6High risk

Vulners AI Score9.6

CVSS310.0

EPSS0.968