Lucene search
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.RAY_CVE-2023-48022.NBINHistoryApr 19, 2024 - 12:00 a.m.
Ray Dashboard Job RCE (CVE-2023-48022)
2024-04-1900:00:00
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
8
ray dashboard
remote code execution
cve-2023-48022
scanner
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.1
Confidence
High
EPSS
0.717
Percentile
98.1%
The remote host contains a ray dashboard which is purposely lacking authentication features. As such, it is therefore, affected by a remote code execution vulnerability in the jobs api endpoint.
Binary data ray_CVE-2023-48022.nbinRelated
cvelist
cvelist
CVE-2023-48022
2023-11-28 00:00:00
CVE-2023-6021 Ray Log File Local File Include
2023-11-16 16:11:42
CVE-2023-6019 Ray Command Injection in cpu_profile Parameter
2023-11-16 16:12:07
nvd
nvd
vulnrichment
vulnrichment
CVE-2023-48022
2023-11-28 00:00:00
cve
cve
packetstorm
packetstorm
Ray Agent Job Remote Code Execution
2024-08-23 00:00:00
metasploit
metasploit
Ray Agent Job RCE
2024-08-08 23:51:14
prion
prion
Code injection
2023-11-28 08:15:00
Authentication flaw
2023-11-16 17:15:00
Command injection
2023-11-16 17:15:00
githubexploit
githubexploit
Exploit for Server-Side Request Forgery in Anyscale Ray
2024-03-29 09:54:31
Exploit for Server-Side Request Forgery in Anyscale Ray
2024-01-10 06:26:01
zdt
zdt
Ray Agent Job Remote Code Execution Exploit
2024-08-27 00:00:00
thn
thn
github
github
Ray Path Traversal vulnerability
2023-11-16 18:30:31
Ray Missing Authorization vulnerability
2023-11-16 21:30:46
osv
osv
Ray Path Traversal vulnerability
2023-11-16 18:30:31
Ray Missing Authorization vulnerability
2023-11-16 21:30:46
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up 08/30/2024
2024-08-30 18:43:05
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.1
Confidence
High
EPSS
0.717
Percentile
98.1%
Related for RAY_CVE-2023-48022.NBIN