Attacks aimed at vulnerable Apache RocketMQ servers underway

BleepingComputer reports that internet-exposed Apache RocketMQ servers vulnerable to the critical remote code execution flaws, tracked as CVE-2023-33246 and CVE-2023-37582 the latter of which stemmed from the incomplete fix of the former were discovered by The ShadowServer Foundation to have been scanned by hundreds of hosts around the world daily for attempted exploitation.

Article Link: Attacks aimed at vulnerable Apache RocketMQ servers underway | SC Media

1 post - 1 participant

Read full topic

apache attacks bleepingcomputer code code execution critical cve daily exposed fix flaws foundation internet remote code remote code execution reports rocketmq rocketmq servers servers shadowserver vulnerable world