Lucene search

K
githubGitHub Advisory DatabaseGHSA-M5PC-86X8-WCXG
HistoryDec 12, 2023 - 6:31 p.m.

Exposure of Sensitive Information in mltable

2023-12-1218:31:35
CWE-200
GitHub Advisory Database
github.com
10
azure
machine learning
sdk users
information disclosure
vulnerability

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

6.7 Medium

AI Score

Confidence

Low

Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability

CPE configuration

Vulners
github_advisory_databasemltableRange<1.5.0
CPENameOperatorVersion
mltablelt1.5.0

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

6.7 Medium

AI Score

Confidence

Low