Nov. 15, 2023, 1:49 p.m. | info@thehackernews.com (The Hacker News)

The Hacker News thehackernews.com

Cybersecurity researchers have demonstrated a new technique that exploits a critical security flaw in Apache ActiveMQ to achieve arbitrary code execution in memory.
Tracked as CVE-2023-46604 (CVSS score: 10.0), the vulnerability is a remote code execution bug that could permit a threat actor to run arbitrary shell commands.
It was patched by Apache in ActiveMQ versions 5.15.16, 5.16.7, 5.17.6,

activemq actor apache apache activemq arbitrary code attackers bug code code execution critical cve cve-2023-46604 cvss cybersecurity exploit exploits flaw memory poc poc exploit radar remote code remote code execution researchers run score security security flaw threat threat actor under under the radar vulnerability

Senior PAM Security Engineer

@ Experian | Hyderabad, India

Cybersecurity Analyst II

@ Spry Methods | Washington, DC (Hybrid)

Cyber Security Engineer

@ Expleo | Gothenburg, AC, Sweden

Cybersecurity – Information System Security Manager (ISSM)

@ Boeing | USA - Albuquerque, NM

Senior Security Engineer - Canada

@ DataVisor | Ontario, Canada - Remote

Cybersecurity Architect

@ HARMAN International | JP Tokyo 3-5-7 Ariake Koto-ku