An attacker creates account in MLflow bypassing authentication
Reporter | Title | Published | Views | Family All 8 |
---|---|---|---|---|
![]() | CVE-2023-6014 MLflow Authentication Bypass | 16 Nov 202321:07 | – | vulnrichment |
![]() | CVE-2023-6014 MLflow Authentication Bypass | 16 Nov 202321:07 | – | cvelist |
![]() | BIT-mlflow-2023-6014 | 6 Mar 202410:58 | – | osv |
![]() | MLflow authentication requirement bypass can allow a user to arbitrarily create an account | 16 Nov 202321:30 | – | osv |
![]() | MLflow authentication requirement bypass can allow a user to arbitrarily create an account | 16 Nov 202321:30 | – | github |
![]() | Authentication Bypass | 17 Nov 202308:05 | – | veracode |
![]() | CVE-2023-6014 | 16 Nov 202321:15 | – | nvd |
![]() | Authentication flaw | 16 Nov 202321:15 | – | prion |
[
{
"vendor": "mlflow",
"product": "mlflow/mlflow",
"versions": [
{
"version": "unspecified",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "latest"
}
]
}
]
Source | Link |
---|---|
huntr | www.huntr.com/bounties/3e64df69-ddc2-463e-9809-d07c24dc1de4 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo