Lucene search

K
nessusThis script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_114324
HistoryJun 26, 2024 - 12:00 a.m.

MLflow Unauthenticated Access

2024-06-2600:00:00
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
2
mlflow
unauthenticated access
source data scanner

AI Score

7.6

Confidence

Low

By default, MLflow does not require authentication to access the application. This allows an attacker to perform arbitrary modifications on experiments or models in the web interface. This detection is included in the AI and LLM category.

No source data

AI Score

7.6

Confidence

Low