Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:6866
HistoryNov 09, 2023 - 7:09 p.m.

(RHSA-2023:6866) Critical: jboss-amq-6-amq63-openshift-container security update

2023-11-0919:09:28
access.redhat.com
18
rhsa-2023
rhel-7
middleware containers
activemq-openwire
unbounded deserialization
cve-2023-46604
remote code execution
references section

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.973 High

EPSS

Percentile

99.8%

JSON

An update for jboss-amq-6-amq63-openshift-container is now available for RHEL-7 based Middleware Containers.

Security Fix(es):

  • activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack (CVE-2023-46604)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Related

ibm 50
amazon 4
oraclelinux 4
nessus 44
f5 3
redhat 17
centos 2
openvas 12
debian 1
osv 8
mageia 1
aix 1
almalinux 2
ubuntu 2
prion 2
ubuntucve 2
malwarebytes 1
thn 5
hivepro 4
attackerkb 1
debiancve 2
zdt 1
rosalinux 1
cloudlinux 1
redhatcve 2
veracode 2
alpinelinux 1
cve 2
cbl_mariner 1
cisa_kev 1
github 1
githubexploit 13
atlassian 1
packetstorm 1
rapid7blog 1
trendmicroblog 1
metasploit 1
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Open JDK affecting Rational Functional Tester
2024-01-02 18:31:26
Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
2024-02-14 12:00:07
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager - Oracle October 2023 CPU (CVE-2023-22081, CVE-2023-22067, CVE-2023-5676)
2024-02-14 08:00:06
amazon
amazon
Medium: java-1.8.0-openjdk
2024-01-03 22:37:00
Medium: java-1.8.0-openjdk
2024-01-03 21:04:00
Important: libssh2
2023-09-13 23:15:00
oraclelinux
oraclelinux
java-1.8.0-openjdk security update
2023-10-19 00:00:00
java-1.8.0-openjdk security update
2023-11-02 00:00:00
java-1.8.0-openjdk security update
2023-11-02 00:00:00
nessus
nessus
CentOS 7 : java-1.8.0-openjdk (RHSA-2023:5761)
2023-12-22 00:00:00
Amazon Corretto Java 8.x < 8.392.08.1 Multiple Vulnerabilities
2023-10-17 00:00:00
Amazon Linux 2 : java-1.8.0-openjdk (ALAS-2024-2397)
2024-01-09 00:00:00
f5
f5
K000138103 : Oracle Java SE vulnerabilities CVE-2023-22067 and CVE-2023-22081
2024-01-02 00:00:00
K000137761 : Apache ActiveMQ vulnerability CVE-2023-46604
2023-12-02 00:00:00
K000138219 : libssh2 vulnerability CVE-2020-22218
2024-01-13 00:00:00
redhat
redhat
(RHSA-2023:5761) Moderate: java-1.8.0-openjdk security update
2023-10-18 21:48:51
(RHSA-2023:5726) Moderate: OpenJDK 8u392 Windows Security Update
2023-10-18 15:41:13
(RHSA-2023:5733) Moderate: java-1.8.0-openjdk security update
2023-10-18 22:05:21
centos
centos
java security update
2024-01-12 19:19:48
libssh2 security update
2024-01-12 19:24:28
openvas
openvas
CentOS: Security Advisory for java (CESA-2023:5761)
2024-03-05 00:00:00
openSUSE: Security Advisory for java (SUSE-SU-2023:4506-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4506-1)
2023-11-22 00:00:00
debian
debian
[SECURITY] [DSA 5537-1] openjdk-11 security update
2023-10-27 16:12:53
osv
osv
Moderate: java-1.8.0-openjdk security update
2023-10-18 00:00:00
Moderate: java-1.8.0-openjdk security update
2023-10-18 00:00:00
openjdk-8 vulnerabilities
2023-11-29 23:00:14
mageia
mageia
Updated java openjdk packages fix security vulnerabilities
2023-11-28 03:11:29
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2023-12-18 09:27:21
almalinux
almalinux
Moderate: java-1.8.0-openjdk security update
2023-10-18 00:00:00
Moderate: java-1.8.0-openjdk security update
2023-10-18 00:00:00
ubuntu
ubuntu
OpenJDK 8 vulnerabilities
2023-11-29 00:00:00
libssh2 vulnerability
2023-09-14 00:00:00
prion
prion
Design/Logic Flaw
2023-08-22 19:16:00
Design/Logic Flaw
2023-10-27 15:15:00
ubuntucve
ubuntucve
CVE-2020-22218
2023-08-22 00:00:00
CVE-2023-46604
2023-10-27 00:00:00
malwarebytes
malwarebytes
Apache ActiveMQ vulnerability used in ransomware attacks
2023-11-03 16:41:44
thn
thn
Kinsing Hackers Exploit Apache ActiveMQ Vulnerability to Deploy Linux Rootkits
2023-11-21 10:00:00
Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks
2024-01-22 03:40:00
GoTitan Botnet Spotted Exploiting Recent Apache ActiveMQ Vulnerability
2023-11-29 05:07:00
hivepro
hivepro
Attacks, Vulnerabilities and Actors 30 October to 5 November 2023
2023-11-07 06:36:50
Ransomware Threats Exploit CVE-2023-46604 in Apache ActiveMQ Servers
2023-11-06 05:42:10
Attacks, Vulnerabilities and Actors 20 November to 26 November 2023
2023-11-28 05:18:25
attackerkb
attackerkb
CVE-2023-46604
2023-10-27 00:00:00
debiancve
debiancve
CVE-2023-46604
2023-10-27 15:15:14
CVE-2020-22218
2023-08-22 19:16:00
zdt
zdt
Apache ActiveMQ Unauthenticated Remote Code Execution Exploit
2023-11-10 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2278
2023-10-24 13:57:22
cloudlinux
cloudlinux
libssh2: Fix of CVE-2020-22218
2023-09-27 17:23:47
redhatcve
redhatcve
CVE-2020-22218
2023-08-30 08:15:25
CVE-2023-46604
2023-10-31 23:33:19
veracode
veracode
Denial Of Service (DoS)
2023-08-24 11:06:00
Remote Code Execution
2023-10-31 11:02:01
alpinelinux
alpinelinux
CVE-2020-22218
2023-08-22 19:16:00
cve
cve
CVE-2020-22218
2023-08-22 19:16:00
CVE-2023-46604
2023-10-27 15:15:14
cbl_mariner
cbl_mariner
CVE-2020-22218 affecting package libssh2 for versions less than 1.9.0-3
2023-09-27 18:02:50
cisa_kev
cisa_kev
Apache ActiveMQ Deserialization of Untrusted Data Vulnerability
2023-11-02 00:00:00
github
github
Apache ActiveMQ is vulnerable to Remote Code Execution
2023-10-27 15:30:20
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Activemq
2023-11-03 22:06:09
Exploit for Deserialization of Untrusted Data in Apache Activemq
2023-11-06 04:05:51
Exploit for Deserialization of Untrusted Data in Apache Activemq
2023-11-20 02:24:47
atlassian
atlassian
Update ActiveMQ to fix CVE-2023-46604
2023-11-02 15:05:16
packetstorm
packetstorm
Apache ActiveMQ Unauthenticated Remote Code Execution
2023-11-14 00:00:00
rapid7blog
rapid7blog
Suspected Exploitation of Apache ActiveMQ CVE-2023-46604
2023-11-01 18:32:04
trendmicroblog
trendmicroblog
CVE-2023-46604 (Apache ActiveMQ) Exploited to Infect Systems With Cryptominers and Rootkits
2023-11-20 00:00:00
metasploit
metasploit
Apache ActiveMQ Unauthenticated Remote Code Execution
2023-11-01 17:34:30

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.973 High

EPSS

Percentile

99.8%

JSON
Related for RHSA-2023:6866
ibm50amazon4oraclelinux4nessus44f53redhat17centos2openvas12debian1osv8mageia1aix1almalinux2ubuntu2prion2ubuntucve2malwarebytes1thn5hivepro4attackerkb1debiancve2zdt1rosalinux1cloudlinux1redhatcve2veracode2alpinelinux1cve2cbl_mariner1cisa_kev1github1githubexploit13atlassian1packetstorm1rapid7blog1trendmicroblog1metasploit1