CVE-2023-50780

Summary

CVE-2023-50780 is a vulnerability affecting Apache ActiveMQ Artemis before version 2.29.0. The issue involves unintended exposure of diagnostic information and controls through MBeans, which are accessible via the Jolokia endpoint. This includes the Log4J2 MBean, which should not be accessible to non-administrative users. An authenticated attacker could exploit this vulnerability to write arbitrary files to the filesystem, potentially leading to remote code execution. It is strongly advised to upgrade to version 2.29.0 or later to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.