CVE-2023-6974
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2023-6974 is a newly discovered cybersecurity vulnerability that enables unauthorized access to internal HTTP(s) servers. A malicious user can exploit this issue to gain access and potentially execute malicious code in the worst-case scenario, such as on an AWS instance. This vulnerability poses a significant risk to organizations and requires immediate attention and patching to prevent potential attacks. The exact nature of the vulnerability is still under investigation, but it is recommended that system administrators take proactive measures to secure their servers and protect against potential unauthorized access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Lfprojects Mlflow
Affected Vendors
- LF Projects, LLC