Security Bulletin: IBM Maximo Application Suite - Monitor Component uses keras-2.14.0-py3-none-any.whl which is vulnerable to CVE-2024-55459.

Summary IBM Maximo Application Suite - Monitor Component uses keras-2.14.0-py3-none-any.whl which is vulnerable to CVE-2024-55459. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2024-55459 DESCRIPTION: An issue in keras 3.7.0 allows attackers to...

CVE-2024-55459 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2024-55459

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile function...

CVE-2024-55459

creationtimestamp| type| source ---|---|--- 2025-01-08 16:27:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113793673094523448 2025-01-08 17:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfao3co7cw2k 2025-01-08 17:43:08+00:00| seen|...

CVE-2024-55459

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile function...

CVE-2024-55459

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the getfile function...