2 matches found
MLflow: trace API endpoints lack proper authorization validators
In MLflow versions prior to 3.13.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying trac...
8.1CVSS7.8AI score0.00376EPSS
SaveExploits1References6Affected Software1
IBM Spectrum Scale 安全漏洞
IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...
4.4CVSS5.6AI score0.00227EPSS
SaveExploits0References4
20