High severity7.7NVD Advisory· Published Feb 6, 2025· Updated Jun 17, 2026
CVE-2024-43779
CVE-2024-43779
Description
An information disclosure vulnerability exists in the Vault API functionality of ClearML Enterprise Server 3.22.5-1533. A specially crafted HTTP request can lead to reading vaults that have been previously disabled, possibly leaking sensitive credentials. An attacker can send a series of HTTP requests to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:clear:clearml_enterprise_server:3.22.5-1533:*:*:*:*:*:*:*
- Range: 3.22.5-1533
Patches
Vulnerability mechanics
References
2- talosintelligence.com/vulnerability_reports/TALOS-2024-2112nvdExploitThird Party Advisory
- www.talosintelligence.com/vulnerability_reports/TALOS-2024-2112nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.