Lucene search
@huntrdevCVELIST:CVE-2022-0736HistoryFeb 23, 2022 - 8:45 a.m.
CVE-2022-0736 Insecure Temporary File in mlflow/mlflow
2022-02-2308:45:13
CWE-377
@huntrdev
www.cve.org
2
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
0.001 Low
EPSS
Percentile
38.1%
Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.
CNA Affected
[
{
"product": "mlflow/mlflow",
"vendor": "mlflow",
"versions": [
{
"lessThan": "1.23.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
osv
osv
BIT-mlflow-2022-0736
2024-03-06 10:59:37
Insecure Temporary File in mlflow
2022-02-24 00:00:54
PYSEC-2022-28
2022-02-23 09:15:00
huntr
huntr
Insecure Temporary File in mlflow/mlflow
2022-01-08 21:42:48
cve
cve
CVE-2022-0736
2022-02-23 09:15:14
github
github
Insecure Temporary File in mlflow
2022-02-24 00:00:54
prion
prion
Design/Logic Flaw
2022-02-23 09:15:00
nvd
nvd
CVE-2022-0736
2022-02-23 09:15:14
veracode
veracode
Information Disclosure
2022-02-24 10:08:41
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
0.001 Low
EPSS
Percentile
38.1%
Related for CVELIST:CVE-2022-0736