Lucene search
6f8de1f0-f67e-45a6-b68f-98777fdb759cNVD:CVE-2024-24592HistoryFeb 06, 2024 - 3:15 p.m.
CVE-2024-24592
2024-02-0615:15:09
CWE-425
CWE-287
6f8de1f0-f67e-45a6-b68f-98777fdb759c
web.nvd.nist.gov
cve-2024-24592
allegro ai
clearml
fileserver
authentication
vulnerability
remote attacker
access
create
modify
delete
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.8%
Lack of authentication in all versions of the fileserver component of Allegro AI’s ClearML platform allows a remote attacker to arbitrarily access, create, modify and delete files.
Affected configurations
Node
clearclearml
Related
cve
cve
CVE-2024-24592
2024-02-06 15:15:09
prion
prion
Authentication flaw
2024-02-06 15:15:00
cvelist
cvelist
CVE-2024-24592
2024-02-06 14:41:24
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.8%
Related for NVD:CVE-2024-24592