Lucene search
K

83 matches found

BDU FSTEC
BDU FSTEC
added 2023/11/15 12:0 a.m.2 views

The vulnerability of the software for working with Azure Machine Learning algorithms lies in the lack of protection for operational data, which allows an attacker to gain unauthorized access to protected information.

The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

6.8CVSS6.8AI score0.03115EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/22 12:0 a.m.1 views

The vulnerability of the software for working with Azure Machine Learning algorithms lies in the lack of protection for operational data, which allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

6.5CVSS6.5AI score0.01752EPSS
Exploits0References2
OSV
OSV
added 2023/04/11 9:15 p.m.2 views

CVE-2023-28312

Azure Machine Learning Information Disclosure Vulnerability...

6.5CVSS7.3AI score0.01752EPSS
Exploits0References1
NVD
NVD
added 2023/04/11 9:15 p.m.11 views

CVE-2023-28312

Azure Machine Learning Information Disclosure Vulnerability...

6.5CVSS6.4AI score0.01752EPSS
Exploits0References1
Prion
Prion
added 2023/04/11 9:15 p.m.12 views

Information disclosure

Azure Machine Learning Information Disclosure Vulnerability...

3.3CVSS6.4AI score0.01752EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/11 7:14 p.m.15 views

CVE-2023-28312 Azure Machine Learning Information Disclosure Vulnerability

...

6.5CVSS6.8AI score0.01752EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2023/04/11 7:0 a.m.29 views

Azure Machine Learning Information Disclosure Vulnerability

...

6.5CVSS7AI score0.01752EPSS
Exploits0
CNNVD
CNNVD
added 2023/04/11 12:0 a.m.4 views

Microsoft Azure Machine Learning 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure Machine Learning. No information about this vulnerability is available at this time, so stay tuned to CNNVD or...

6.5CVSS7.1AI score0.01752EPSS
Exploits0References3
NCSC
NCSC
added 2023/04/11 12:0 a.m.4 views

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in the Azure components Service Connector and Machine Learning. A malicious party could exploit the vulnerabilities to bypass internal firewall rules, or to gain access to logging data. The malicious party must be authenticated with the appropriate...

7.5CVSS6.3AI score0.01752EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.3 views

PT-2023-2416 · Microsoft · Azure Machine Learning

Name of the Vulnerable Software and Affected Versions: Azure Machine Learning affected versions not specified Description: The issue is related to a lack of protection for service data in Azure Machine Learning, which could allow a remote attacker to gain unauthorized access to protected...

6.5CVSS9.5AI score0.01752EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2023/03/24 10:1 p.m.30 views

Remote file existence check vulnerability in `mlflow server` and `mlflow ui` CLIs

Impact Users of the MLflow Open Source Project who are hosting the MLflow Model Registry using the mlflow server or mlflow ui commands using an MLflow version older than MLflow 2.2.1 may be vulnerable to a remote file existence check exploit if they are not limiting who can query their server for...

5.3CVSS5.3AI score0.00578EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2023/03/24 10:1 p.m.18 views

GHSA-WP72-7HJ9-5265 Remote file existence check vulnerability in `mlflow server` and `mlflow ui` CLIs

Impact Users of the MLflow Open Source Project who are hosting the MLflow Model Registry using the mlflow server or mlflow ui commands using an MLflow version older than MLflow 2.2.1 may be vulnerable to a remote file existence check exploit if they are not limiting who can query their server for...

4.8CVSS4.7AI score0.00578EPSS
Exploits1References6
OSV
OSV
added 2023/02/14 8:15 p.m.2 views

CVE-2023-23382

Azure Machine Learning Compute Instance Information Disclosure Vulnerability...

6.5CVSS6.9AI score0.03115EPSS
Exploits0References1
Prion
Prion
added 2023/02/14 8:15 p.m.20 views

Information disclosure

Azure Machine Learning Compute Instance Information Disclosure Vulnerability...

4CVSS6.5AI score0.03115EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/14 7:32 p.m.12 views

CVE-2023-23382 Azure Machine Learning Compute Instance Information Disclosure Vulnerability

...

6.5CVSS6.8AI score0.03115EPSS
Exploits0References1
NCSC
NCSC
added 2023/02/14 12:0 a.m.22 views

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several components of Azure. For an overview of the vulnerabilities, see the following list. Azure App Service: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...

8.7CVSS6.4AI score0.03115EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2023/02/14 12:0 a.m.4 views

PT-2023-6855 · Microsoft · Azure Machine Learning

Name of the Vulnerable Software and Affected Versions: Azure Machine Learning affected versions not specified Description: The issue is related to a lack of protection for service data in Azure Machine Learning, which can allow a remote attacker to gain unauthorized access to protected informatio...

6.8CVSS9.5AI score0.03115EPSS
Exploits0References6
vulnersOsv
vulnersOsv
added 2023/01/26 9:15 p.m.3 views

acuity (=6.18.0), acuitypro (=6.18.0) +81 more potentially affected by CVE-2022-25882 via onnx (>=0.2.0 <=1.12.0)

onnx PYPI version =0.2.0, =0.0.0, =0.0.157, =1.44.0, =1.44.0, =1.44.0, =1.44.0, =1.44.0, =1.44.0, =1.44.0, =0.5.8, =0.1.0, =0.3.0 and more Source cves: CVE-2022-25882 Source advisory: OSV:PYSEC-2023-38...

7.5CVSS6.7AI score0.01608EPSS
Exploits1
The Hacker News
The Hacker News
added 2023/01/17 2:12 p.m.71 views

Microsoft Azure Services Flaws Could've Exposed Cloud Resources to Unauthorized Access

Four different Microsoft Azure services have been found vulnerable to server-side request forgery SSRF attacks that could be exploited to gain unauthorized access to cloud resources. The security issues, which were discovered by Orca between October 8, 2022 and December 2, 2022 in Azure API...

0.3AI score
Exploits0
The Hacker News
The Hacker News
added 2023/01/17 2:12 p.m.3 views

Microsoft Azure Services Flaws Could've Exposed Cloud Resources to Unauthorized Access

Four different Microsoft Azure services have been found vulnerable to server-side request forgery SSRF attacks that could be exploited to gain unauthorized access to cloud resources. The security issues, which were discovered by Orca between October 8, 2022 and December 2, 2022 in Azure API...

7.2AI score
Exploits0
Rows per page
Query Builder