CVE-2024-43779

Summary

CVE-2024-43779 is an information disclosure vulnerability affecting ClearML Enterprise Server 3.22.5-1533. The Vault API functionality is the target, with a crafted HTTP request exposing the ability to read previously disabled vaults. This potentially leaks sensitive credentials, posing a significant risk to organizational security. An attacker can exploit this vulnerability by sending a series of manipulated HTTP requests to the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.