← CVE Intelligence

CVE-2024-43779

ClearML / ClearML PUBLISHED

Description (CNA)

An information disclosure vulnerability exists in the Vault API functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP request can lead to reading vaults that have been previously disabled, possibly leaking sensitive credentials. An attacker can send a series of HTTP requests to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
ClearML / ClearMLaffected Enterprise Server 3.22.5-1533

CWE

CWE-200

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.