Apache Patches Critical OFBiz RCE Vulnerability

Hackers are exploiting a critical Apache OFBiz vulnerability (CVE-2024-45195) that allows unauthenticated remote code execution, threatening organizations using OFBiz.

Apache OFBiz Flaw- CVE-2024-45195

The CVE-2024-45195 vulnerability results from missing view authorization checks, allowing attackers to execute arbitrary code on the server without valid credentials.

This flaw bypasses previous patches, posing a risk to organizations that haven’t updated their systems yet.

Apache OFBiz, a widely used open-source ERP solution, is crucial in industries like finance and business.

The vulnerability could have a significant impact due to the sensitive data and operations managed by OFBiz.

Since CVE-2024-45195 was disclosed, Imperva has detected over 25,000 attack attempts on 4,000 sites. Most attacks have targeted the financial services and business sectors.

Attackers have used malicious bots and Go-based tools to exploit the vulnerability.

Despite the attacks’ scale, Imperva’s proactive defenses have kept their customers safe. Imperva’s advanced threat intelligence and continuous monitoring have effectively protected clients from these attempts and previous high-severity OFBiz vulnerabilities like CVE-2023-51467.

Recommendation:

Stay Updated: Regularly apply the latest security patches to protect against CVE-2024-45195.
Monitor Traffic: Actively watch for suspicious network activity.
Ensure Protection: Use security solutions that detect and respond to threats quickly.
Conduct Audits: Perform regular security audits and updates.
Stay Vigilant: Be aware of evolving attack tactics and maintain proactive cybersecurity measures.
Leverage Intelligence: Use advanced security solutions and threat intelligence to guard against vulnerabilities.