Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability
Date: 2023-12
Affected: microsoft/azure_machine_learning_software_development_kit
Attack vector: info-disclosure
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2023-35625
CWE: CWE-200
CVSS: 4.7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)

Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability


Mitigations:

Architectural layers (MAESTRO):