Lucene search
PRIOn knowledge basePRION:CVE-2023-37582HistoryJul 12, 2023 - 10:15 a.m.
Design/Logic Flaw
2023-07-1210:15:00
PRIOn knowledge base
www.prio-n.com
5
rocketmq
nameserver
remote command execution
vulnerability
cve-2023-33246
extranet
permission verification
upgrade
4.x
5.x
The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1.
When NameServer address are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function on the NameServer component to execute commands as the system users that RocketMQ is running as.
It is recommended for users to upgrade their NameServer version to 5.1.2 or above for RocketMQ 5.x or 4.9.7 or above for RocketMQ 4.x to prevent these attacks.
Related
cvelist
cvelist
cve
cve
CVE-2023-37582
2023-07-12 10:15:11
CVE-2023-33246
2023-05-24 15:15:09
veracode
veracode
Arbitrary Code Injection
2023-07-21 10:22:11
Remote Code Execution (RCE)
2023-05-25 02:04:34
osv
osv
RocketMQ NameServer component Code Injection vulnerability
2023-07-12 12:31:36
CVE-2023-37582
2023-07-12 10:15:11
nvd
nvd
CVE-2023-37582
2023-07-12 10:15:11
CVE-2023-33246
2023-05-24 15:15:09
github
github
nessus
nessus
Apache RocketMQ < 4.9.7 / 5.x < 5.1.2 RCE (CVE-2023-37582)
2023-11-10 00:00:00
Apache RocketMQ 4.2.0 < 4.6.1 Directory Traversal (CVE-2023-37582)
2023-11-10 00:00:00
cnvd
cnvd
Apache RocketMQ Code Injection Vulnerability
2023-07-14 00:00:00
Apache RocketMQ Command Execution Vulnerability
2023-05-28 00:00:00
githubexploit
githubexploit
Exploit for Code Injection in Apache Rocketmq
2023-07-14 12:22:45
Exploit for Code Injection in Apache Rocketmq
2023-06-01 02:17:20
Exploit for Code Injection in Apache Rocketmq
2024-06-29 06:31:17
metasploit
metasploit
Apache RocketMQ Version Scanner
2023-06-07 21:29:53
Apache RocketMQ update config RCE
2023-07-05 16:38:51
packetstorm
packetstorm
Apache RocketMQ 5.1.0 Arbitrary Code Injection
2023-07-07 00:00:00
hivepro
hivepro
Attacks, Vulnerabilities and Actors 4 September to 10 September 2023
2023-09-12 05:39:44
DreamBus Botnet Exploiting A Critical Vulnerability in Apache RocketMQ
2023-09-07 13:30:03
prion
prion
Design/Logic Flaw
2023-05-24 15:15:00
cisa_kev
cisa_kev
Apache RocketMQ Command Execution Vulnerability
2023-09-06 00:00:00
thn
thn
attackerkb
attackerkb
CVE-2023-33246
2023-05-24 00:00:00
zdt
zdt
Apache RocketMQ 5.1.0 Arbitrary Code Injection Exploit
2023-07-10 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-07-07 19:26:23
ibm
ibm