Beveiligingsadvies

CVE-2024-43779

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-06 16:47:28

Laatst bijgewerkt 2025-02-12 19:51:09

Toegewezen door talos

CVSS-score 7.7

Status PUBLISHED

Beschrijving

An information disclosure vulnerability exists in the Vault API functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP request can lead to reading vaults that have been previously disabled, possibly leaking sensitive credentials. An attacker can send a series of HTTP requests to trigger this vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗