Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-32315 | Unauthenticated Path Traversal in Ignite Realtime Openfire Admin Console | 7.5 | 100% | KEVPoC ×2 | KEV |
| CVE-2023-33246 | Unauthenticated Remote Command Execution in Apache RocketMQ | 9.8 | 97% | KEVPoC ×4 | KEV |
CVE-2023-36845+3 related CVEs | Unauthenticated RCE in Juniper J-Web on EX and SRX Series | 9.8 group max | 95% | KEVPoC ×2 | KEV |
From the original article
4 min read at thehackernews.com
Recently disclosed security flaws impacting Juniper firewalls, Openfire, and Apache RocketMQ servers have come under active exploitation in the wild, according to multiple reports. The Shadowserver Foundation said that it's "seeing exploitation attempts from multiple IPs for Juniper J-Web CVE-2023-36844 (& friends) targeting /webauth_operation. php endpoint," the same day a proof-of-concept (PoC) became available.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.