CVE-2024-6577
Last modified
CVE-2024-6577 is a medium-severity vulnerability rated 6.3/10 on the CVSS scale. In the latest version of pytorch/serve, the script 'upload_results_to_s3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership or confirming its accessibility. This could lead to potential security vulnerabilities or unauthorized access to the bucket if it is not properly secured or claimed by the appropriate entity. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
In the latest version of pytorch/serve, the script 'upload_results_to_s3.sh' references the S3 bucket 'benchmarkai-metrics-prod' without ensuring its ownership or confirming its accessibility. This could lead to potential security vulnerabilities or unauthorized access to the bucket if it is not properly secured or claimed by the appropriate entity. The issue may result in data breaches, exposure of proprietary information, or unauthorized modifications to stored data.
Metrics
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-6577?
How severe is CVE-2024-6577?
How do I fix CVE-2024-6577?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-6571The Optimize Images ALT Text (alt tag) & names for SEO using…5.3
- CVE-2024-6572Improper host key checking in active check 'Check SFTP Servi…7.4
- CVE-2024-6573The Intelligence plugin for WordPress is vulnerable to Full …5.3
- CVE-2024-6574The Laposta plugin for WordPress is vulnerable to Full Path …5.3
- CVE-2024-6575The The Plus Addons for Elementor – Elementor Addons, Page T…5.4
- CVE-2024-6576Improper Authentication vulnerability in Progress MOVEit Tra…9.8
- CVE-2024-6578A stored cross-site scripting (XSS) vulnerability exists in …5.4
- CVE-2024-6579The Web and WooCommerce Addons for WPBakery Builder plugin f…4.3
- CVE-2024-6580The /n software IPWorks SSH library SFTPServer component can…6.5
- CVE-2024-6581A vulnerability in the discussion image upload function of t…9
- CVE-2024-6582A broken access control vulnerability exists in the latest v…4.3
- CVE-2024-6583A path traversal vulnerability exists in the latest version …4.3
Are you affected by CVE-2024-6577?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST