PT-2024-35110 · Unknown +2 · Scikit-Learn +2

🗓️ 06 Jun 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Token leakage: vectorizer stores training tokens in stop words; upgrade from 1.4.1.post1 to 1.5.0.

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.15.0 IF001	31 Jul 202409:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - AI Broker component usesscikit_learn-1.3.2-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl which is vulnerable to this CVE-2024-5206	9 Sep 202408:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses scikit_learn-1.3.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl which is vulnerable to CVE-2024-5206.	29 Dec 202512:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Automation Workflow Machine Learning Server are addressed with 24.0.0-IF001	8 Aug 202417:11	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	8 Jul 202408:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Predict Component uses CVE-2024-5206 (Medium) detected in scikit_learn-1.1.3-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl which is vulnerable to CVE-2024-5206	28 Jan 202521:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in scikit-learn affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	14 May 202519:56	–	ibm
Chainguard	CVE-2024-5206 vulnerabilities	6 Jun 202419:16	–	cgr
Circl	CVE-2024-5206	19 Jan 202600:13	–	circl
CNNVD	scikit-learn Security Vulnerabilities	6 Jun 202400:00	–	cnnvd

Source	Link
github	www.github.com/scikit-learn/scikit-learn/commit/70ca21f106b603b611da73012c9ade7cd8e438b8
osv	www.osv.dev/vulnerability/PYSEC-2024-110
advisories	www.advisories.mageia.org/MGASA-2024-0228.html
osv	www.osv.dev/vulnerability/CVE-2024-5206
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-5206
ubuntu	www.ubuntu.com/security/CVE-2024-5206
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-5206
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
osv	www.osv.dev/vulnerability/MGASA-2024-0228
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2024-5206

24 Oct 2024 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.14.7

CVSS 34.7

EPSS0.00037

SSVC