Detections
Analytics
SCA: security update for org.apache.rocketmq:rocketmq-namesrv (GHSA-gpq8-963w-8qc9)
critical Tenable Self-Hosted Container Security Plugin ID 415236
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246
issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and
lack permission verification, an attacker can exploit this vulnerability by using the update configuration
function on the NameServer component to execute commands as the system users that RocketMQ is running as.
It is recommended for users to upgrade their NameServer version to 5.1.2 or above for RocketMQ 5.x or
4.9.7 or above for RocketMQ 4.x to prevent these attacks. (CVE-2023-37582)
See Also
Plugin Details
Severity: Critical
ID: 415236
Version: Revision 1.7
Type: Local
Family: SCA Checks
Published: 1/23/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.58
Vendor
Vendor Severity: Critical
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2023-37582
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 7/12/2023
Vulnerability Publication Date: 7/12/2023
Reference Information
CVE: CVE-2023-37582
cwe: CWE-94