US CISA added critical Apache RocketMQ flaw to its Known Exploited Vulnerabilities catalog

US CISA added critical vulnerability CVE-2023-33246 in Apache RocketMQ to its Known Exploited Vulnerabilities catalog. US Cybersecurity and Infrastructure Security Agency (CISA) added a critical flaw CVE-2023-33246 (CVSS score 9.8) affecting Apache RocketMQ to its Known Exploited Vulnerabilities Catalog. Several components of Apache RocketMQ, including NameServer, Broker, and Controller, are exposed to the extranet and lack permission verification. Threat actors […]

The post US CISA added critical Apache RocketMQ flaw to its Known Exploited Vulnerabilities catalog appeared first on Security …

agency apache breaking news broker catalog cisa components critical critical flaw critical vulnerability cve cvss cybersecurity exploited exploited vulnerabilities flaw hacking information security news infrastructure infrastructure security it information security known exploited known exploited vulnerabilities known exploited vulnerabilities catalog nameserver pierluigi paganini rocketmq score security us cisa vulnerabilities vulnerability