← back
CVE-2024-24595

CVE-2024-24595

CVSS 6 MEDIUMEPSS 0.3%CWE-522
Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Affected products
Allegro.AI · ClearML

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://hiddenlayer.com/research/not-so-clear-how-mlops-solutions-can-muddy-the-waters-of-your-supply-chain/