Apache ActiveMQ vulnerability used in ransomware attacks

On the 27 October, the Apache Software Foundation (ASF) announced a very serious vulnerability in Apache ActiveMQ that can be used to achieve remote code execution (RCE). The Cybersecurity and Infrastructure Security Agency has now added this vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This means that Federal Civilian Executive Branch (FCEB) agencies need to remediate this vulnerability by November 11, 2023 in order to protect their devices against active threats.

The catalog …

activemq agency apache apache activemq apache software foundation asf attacks catalog code code execution cybersecurity exploitation exploited exploited vulnerabilities foundation infrastructure infrastructure security known exploited known exploited vulnerabilities known exploited vulnerabilities catalog october ransomware ransomware attacks rce remote code remote code execution security serious software vulnerabilities vulnerability