EUVD-2024-2402

Malicious code in bioql PyPI...

PT-2024-12430 · Apache · Apache Rocketmq

Name of the Vulnerable Software and Affected Versions: Apache RocketMQ affected versions not specified Description: The issue concerns a stealthy malware named perfctl, which targets millions of Linux servers. It exploits over 20,000 common misconfigurations and a critical vulnerability in Apache...

Exposure Of Sensitive Information

org.apache.rocketmq, rocketmq-all is vulnerable to the Exposure of Sensitive Information. The vulnerability is due to specific interfaces that allow an attacker with regular user privileges or listed in the IP whitelist to acquire the administrator's account and password. This vulnerability enabl...