Security News > 2023 > November > 3,000 Apache ActiveMQ servers vulnerable to RCE attacks exposed online
Over three thousand internet-exposed Apache ActiveMQ servers are vulnerable to a recently disclosed critical remote code execution vulnerability.
Apache ActiveMQ is a scalable open-source message broker that fosters communication between clients and servers, supporting Java and various cross-language clients and many protocols, including AMQP, MQTT, OpenWire, and STOMP. Thanks to the project's support for a diverse set of secure authentication and authorization mechanisms, it is widely used in enterprise environments where systems communicate without direct connectivity.
Researchers from threat monitoring service ShadowServer found 7,249 servers accessible with ActiveMQ services.
Of those, 3,329 were found to run an ActiveMQ version vulnerable to CVE-2023-4660, with all of these servers vulnerable to remote code execution.
Millions of Exim mail servers exposed to zero-day RCE attacks.
Thousands of Juniper devices vulnerable to unauthenticated RCE flaw.
News URL
Related news
- TellYouThePass ransomware joins Apache ActiveMQ RCE attacks (source)
- GNOME Linux systems exposed to RCE attacks via file downloads (source)
- libcue Library Flaw Opens GNOME Linux Systems Vulnerable to RCE Attacks (source)
- GNOME users at risk of RCE attack (CVE-2023-43641) (source)
- ShellBot Uses Hex IPs to Evade Detection in Attacks on Linux SSH Servers (source)
- Ransomware attacks now target unpatched WS_FTP servers (source)
- Qubitstrike attacks rootkit Jupyter Linux servers to steal credentials (source)
- QNAP takes down server behind widespread brute-force attacks (source)
- Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability (source)
- HelloKitty ransomware now exploiting Apache ActiveMQ flaw in attacks (source)