Поиск уязвимостей
Количество 5
Количество 5
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by default. Considering these logs do not require root access, an attacker can monitor these logs, steal sensitive auth/cookie information, and gain access to the Jupyter server. Jupyter notebook version 6.4.x contains a patch for this issue. There are currently no known workarounds.
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by default. Considering these logs do not require root access, an attacker can monitor these logs, steal sensitive auth/cookie information, and gain access to the Jupyter server. Jupyter notebook version 6.4.x contains a patch for this issue. There are currently no known workarounds.
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interacti ...
GHSA-m87f-39q9-6f55
Sensitive Auth & Cookie data stored in Jupyter server logs
ALT-PU-2022-2266
ALT-PU-2022-2266: package `python3-module-notebook` update to version 6.4.12-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-24758 The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by default. Considering these logs do not require root access, an attacker can monitor these logs, steal sensitive auth/cookie information, and gain access to the Jupyter server. Jupyter notebook version 6.4.x contains a patch for this issue. There are currently no known workarounds. | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-24758 The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by default. Considering these logs do not require root access, an attacker can monitor these logs, steal sensitive auth/cookie information, and gain access to the Jupyter server. Jupyter notebook version 6.4.x contains a patch for this issue. There are currently no known workarounds. | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
| CVE-2022-24758 The Jupyter notebook is a web-based notebook environment for interacti ... | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
| GHSA-m87f-39q9-6f55 Sensitive Auth & Cookie data stored in Jupyter server logs | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2022-2266 ALT-PU-2022-2266: package `python3-module-notebook` update to version 6.4.12-alt1 | CVSS3: 7.5 | больше 4 лет назад |
Уязвимостей на страницу